{
  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:85fec851-d97a-402e-a5b5-ff0d6594396f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-16T13:55:49-05:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "syft",
          "version": "1.51.0"
        }
      ]
    },
    "component": {
      "bom-ref": "6a22de198d617222",
      "type": "container",
      "name": "a3e9-website",
      "version": "sbom-verify"
    },
    "properties": [
      {
        "name": "a3e9:redaction",
        "value": "Absolute build-host paths rewritten to repo-relative form before publication. Components, versions, licenses and dependency edges are unmodified."
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/1to2@1.0.0?package-id=411865287a55ff3d",
      "type": "library",
      "author": "Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)",
      "name": "1to2",
      "version": "1.0.0",
      "description": "NAN 1 -> 2 Migration Script",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/1to2@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/nan.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nan@2.22.2/node_modules/nan/tools/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40a3e9/tinl-wasm@0.1.0?package-id=f5249658df8f4f94",
      "type": "library",
      "name": "@a3e9/tinl-wasm",
      "version": "0.1.0",
      "cpe": "cpe:2.3:a:\\@a3e9\\/tinl-wasm:\\@a3e9\\/tinl-wasm:0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40a3e9/tinl-wasm@0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl-wasm:\\@a3e9\\/tinl_wasm:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm:\\@a3e9\\/tinl-wasm:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm:\\@a3e9\\/tinl_wasm:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl:\\@a3e9\\/tinl-wasm:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl:\\@a3e9\\/tinl_wasm:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@a3e9+tinl-wasm@file+vendor+tinl-wasm-web/node_modules/@a3e9/tinl-wasm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40a3e9/tinl-wasm-node@0.1.0?package-id=ede6fda66e6337e9",
      "type": "library",
      "name": "@a3e9/tinl-wasm-node",
      "version": "0.1.0",
      "cpe": "cpe:2.3:a:\\@a3e9\\/tinl-wasm-node:\\@a3e9\\/tinl-wasm-node:0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40a3e9/tinl-wasm-node@0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl-wasm-node:\\@a3e9\\/tinl_wasm_node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm_node:\\@a3e9\\/tinl-wasm-node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm_node:\\@a3e9\\/tinl_wasm_node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl-wasm:\\@a3e9\\/tinl-wasm-node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl-wasm:\\@a3e9\\/tinl_wasm_node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm:\\@a3e9\\/tinl-wasm-node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl_wasm:\\@a3e9\\/tinl_wasm_node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl:\\@a3e9\\/tinl-wasm-node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@a3e9\\/tinl:\\@a3e9\\/tinl_wasm_node:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@a3e9+tinl-wasm-node@file+vendor+tinl-wasm/node_modules/@a3e9/tinl-wasm-node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40adraffy/ens-normalize@1.11.1?package-id=8bcb553e001e707e",
      "type": "library",
      "author": "raffy.eth (http://raffy.antistupid.com)",
      "name": "@adraffy/ens-normalize",
      "version": "1.11.1",
      "description": "Ethereum Name Service (ENS) Name Normalizer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40adraffy/ens-normalize@1.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/adraffy/ens-normalize.js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/adraffy/ens-normalize.js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@adraffy+ens-normalize@1.11.1/node_modules/@adraffy/ens-normalize/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40antfu/install-pkg@1.1.0?package-id=2df9472b0b6a4660",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@antfu/install-pkg",
      "version": "1.1.0",
      "description": "Install package programmatically.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@antfu\\/install-pkg:\\@antfu\\/install-pkg:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40antfu/install-pkg@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/antfu/install-pkg.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antfu/install-pkg#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@antfu\\/install-pkg:\\@antfu\\/install_pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@antfu\\/install_pkg:\\@antfu\\/install-pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@antfu\\/install_pkg:\\@antfu\\/install_pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@antfu\\/install:\\@antfu\\/install-pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@antfu\\/install:\\@antfu\\/install_pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antfu:\\@antfu\\/install-pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antfu:\\@antfu\\/install_pkg:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@antfu+install-pkg@1.1.0/node_modules/@antfu/install-pkg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40antfu/utils@9.3.0?package-id=dcedec4c5a5163ad",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@antfu/utils",
      "version": "9.3.0",
      "description": "Opinionated collection of common JavaScript / TypeScript utils by @antfu",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:antfu:utils:9.3.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/%40antfu/utils@9.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/antfu/utils.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antfu/utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@antfu+utils@9.3.0/node_modules/@antfu/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40appthreat/atom@2.5.6?package-id=0799d783a8d0ec51",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@appthreat/atom",
      "version": "2.5.6",
      "description": "Create atom (⚛) representation for your application, packages and libraries",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@appthreat\\/atom:\\@appthreat\\/atom:2.5.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40appthreat/atom@2.5.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/AppThreat/atom.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/AppThreat/atom#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AppThreat:\\@appthreat\\/atom:2.5.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40appthreat/atom-common@1.1.0?package-id=a3adb4751ccc961a",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@appthreat/atom-common",
      "version": "1.1.0",
      "description": "Common library for the @appthreat/atom project.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@appthreat\\/atom-common:\\@appthreat\\/atom-common:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40appthreat/atom-common@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/AppThreat/atom-common.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/AppThreat/atom-common#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom-common:\\@appthreat\\/atom_common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom_common:\\@appthreat\\/atom-common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom_common:\\@appthreat\\/atom_common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom:\\@appthreat\\/atom-common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom:\\@appthreat\\/atom_common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AppThreat:\\@appthreat\\/atom-common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AppThreat:\\@appthreat\\/atom_common:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom-common@1.1.0/node_modules/@appthreat/atom-common/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40appthreat/atom-parsetools@1.3.0?package-id=5832b50918b8ca21",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@appthreat/atom-parsetools",
      "version": "1.3.0",
      "description": "Parsing tools that complement the @appthreat/atom project.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@appthreat\\/atom-parsetools:\\@appthreat\\/atom-parsetools:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40appthreat/atom-parsetools@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/AppThreat/atom-parsetools.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/AppThreat/atom-parsetools#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom-parsetools:\\@appthreat\\/atom_parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom_parsetools:\\@appthreat\\/atom-parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom_parsetools:\\@appthreat\\/atom_parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom:\\@appthreat\\/atom-parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@appthreat\\/atom:\\@appthreat\\/atom_parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AppThreat:\\@appthreat\\/atom-parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AppThreat:\\@appthreat\\/atom_parsetools:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom-parsetools@1.3.0/node_modules/@appthreat/atom-parsetools/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/code-frame@7.27.1?package-id=4169dcd9e5da3ff2",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/code-frame",
      "version": "7.27.1",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/code-frame@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-code-frame",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code_frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code-frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code_frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code-frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code_frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/code-frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/code_frame:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+code-frame@7.27.1/node_modules/@babel/code-frame/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/code-frame@7.29.7?package-id=2ee99022c9cffa5b",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/code-frame",
      "version": "7.29.7",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/code-frame@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-code-frame",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code_frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code-frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code_frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code-frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code_frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/code-frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/code_frame:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+code-frame@7.29.7/node_modules/@babel/code-frame/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/compat-data@7.28.4?package-id=ceb7167d04028d96",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/compat-data",
      "version": "7.28.4",
      "description": "The compat-data to determine required Babel plugins",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat-data:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/compat-data@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat_data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/compat_data:\\@babel\\/compat-data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/compat_data:\\@babel\\/compat_data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/compat:\\@babel\\/compat-data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/compat:\\@babel\\/compat_data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/compat-data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/compat_data:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+compat-data@7.28.4/node_modules/@babel/compat-data/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/core@7.28.4?package-id=867ef326eebe6616",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/core",
      "version": "7.28.4",
      "description": "Babel compiler core.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/core:\\@babel\\/core:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/core@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-core",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/core:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+core@7.28.4/node_modules/@babel/core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/generator@7.28.3?package-id=9ce1bb8407d726a9",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/generator",
      "version": "7.28.3",
      "description": "Turns an AST into code.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/generator:\\@babel\\/generator:7.28.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/generator@7.28.3",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-generator",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/generator:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+generator@7.28.3/node_modules/@babel/generator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/generator@7.29.8?package-id=14c3ce5d1f064675",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/generator",
      "version": "7.29.8",
      "description": "Turns an AST into code.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/generator:\\@babel\\/generator:7.29.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/generator@7.29.8",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-generator",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/generator:7.29.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+generator@7.29.8/node_modules/@babel/generator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-compilation-targets@7.27.2?package-id=bef8baa34270da47",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-compilation-targets",
      "version": "7.27.2",
      "description": "Helper functions on Babel compilation targets",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.27.2",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_compilation_targets:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_compilation_targets:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-compilation:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-compilation:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_compilation:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_compilation:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-compilation-targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_compilation_targets:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-compilation-targets@7.27.2/node_modules/@babel/helper-compilation-targets/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-globals@7.28.0?package-id=1e9b3dbc33ceba80",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-globals",
      "version": "7.28.0",
      "description": "A collection of JavaScript globals for Babel internal usage",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-globals:\\@babel\\/helper-globals:7.28.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-globals@7.28.0",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-globals:\\@babel\\/helper_globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_globals:\\@babel\\/helper-globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_globals:\\@babel\\/helper_globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_globals:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-globals@7.28.0/node_modules/@babel/helper-globals/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-globals@7.29.7?package-id=04e84ffd140de13f",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-globals",
      "version": "7.29.7",
      "description": "A collection of JavaScript globals for Babel internal usage",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-globals:\\@babel\\/helper-globals:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-globals@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-globals:\\@babel\\/helper_globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_globals:\\@babel\\/helper-globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_globals:\\@babel\\/helper_globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_globals:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-globals@7.29.7/node_modules/@babel/helper-globals/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-module-imports@7.27.1?package-id=38420ecd0f99947c",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-module-imports",
      "version": "7.27.1",
      "description": "Babel helper functions for inserting module loads",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-module-imports@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-imports",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module_imports:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module_imports:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-module-imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_module_imports:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-module-imports@7.27.1/node_modules/@babel/helper-module-imports/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-module-transforms@7.28.3?package-id=9f1a09fbd5fc655a",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-module-transforms",
      "version": "7.28.3",
      "description": "Babel helper functions for implementing ES6 module transformations",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.28.3",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module_transforms:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module_transforms:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-module-transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_module_transforms:7.28.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-module-transforms@7.28.3_@babel+core@7.28.4/node_modules/@babel/helper-module-transforms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-plugin-utils@7.27.1?package-id=2b0d3199e718da3d",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-plugin-utils",
      "version": "7.27.1",
      "description": "General utilities for plugins to use",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-plugin-utils:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-plugin-utils",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-plugin-utils:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_plugin_utils:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_plugin_utils:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-plugin:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-plugin:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_plugin:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_plugin:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-plugin-utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_plugin_utils:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-plugin-utils@7.27.1/node_modules/@babel/helper-plugin-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-string-parser@7.27.1?package-id=583070fbe8802e76",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-string-parser",
      "version": "7.27.1",
      "description": "A utility package to parse strings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-string-parser@7.27.1/node_modules/@babel/helper-string-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-string-parser@7.29.7?package-id=35d4a9bf523f01f2",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-string-parser",
      "version": "7.29.7",
      "description": "A utility package to parse strings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-string-parser@8.0.0?package-id=3848411f4c5e8b8c",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-string-parser",
      "version": "8.0.0",
      "description": "A utility package to parse strings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-string-parser@8.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-string-parser@8.0.0/node_modules/@babel/helper-string-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.27.1?package-id=b4288b59991f46b0",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-validator-identifier",
      "version": "7.27.1",
      "description": "Validate identifier/keywords name",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-validator-identifier@7.27.1/node_modules/@babel/helper-validator-identifier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.29.7?package-id=f4054dbe2bb6ef26",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-validator-identifier",
      "version": "7.29.7",
      "description": "Validate identifier/keywords name",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@8.0.4?package-id=dc75fe0d02e5e554",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-validator-identifier",
      "version": "8.0.4",
      "description": "Validate identifier/keywords name",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-validator-identifier@8.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-validator-identifier@8.0.4/node_modules/@babel/helper-validator-identifier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helper-validator-option@7.27.1?package-id=4b984d3630ddc5e1",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helper-validator-option",
      "version": "7.27.1",
      "description": "Validate plugin/preset options",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-option:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helper-validator-option@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator-option:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_option:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator_option:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_option:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helper-validator-option@7.27.1/node_modules/@babel/helper-validator-option/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/helpers@7.28.4?package-id=12cca18e3b92c790",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/helpers",
      "version": "7.28.4",
      "description": "Collection of helper functions used by Babel transforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/helpers:\\@babel\\/helpers:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/helpers@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helpers",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/helpers:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+helpers@7.28.4/node_modules/@babel/helpers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/parser@7.28.4?package-id=643f34f47eafc8c7",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/parser",
      "version": "7.28.4",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/parser@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+parser@7.28.4/node_modules/@babel/parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/parser@7.29.7?package-id=f2ab41e295241f1b",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/parser",
      "version": "7.29.7",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/parser@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+parser@7.29.7/node_modules/@babel/parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/parser@7.29.8?package-id=960551296870b094",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/parser",
      "version": "7.29.8",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.29.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/parser@7.29.8",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.29.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+parser@7.29.8/node_modules/@babel/parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/parser@8.0.4?package-id=585150e4dd96b3ed",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/parser",
      "version": "8.0.4",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:8.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/parser@8.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/parser:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+parser@8.0.4/node_modules/@babel/parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.27.1?package-id=6f54a62e9b13cf7c",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/plugin-transform-react-jsx-self",
      "version": "7.27.1",
      "description": "Add a __self prop to all JSX Elements",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-self:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-plugin-transform-react-jsx-self",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-self:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_self:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_self:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/plugin-transform-react-jsx-self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/plugin_transform_react_jsx_self:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+plugin-transform-react-jsx-self@7.27.1_@babel+core@7.28.4/node_modules/@babel/plugin-transform-react-jsx-self/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.27.1?package-id=2f7fb1e46180eba0",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/plugin-transform-react-jsx-source",
      "version": "7.27.1",
      "description": "Add a __source prop to all JSX Elements",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-source:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.27.1",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-plugin-transform-react-jsx-source",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-source:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_source:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_source:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/plugin-transform-react-jsx-source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/plugin_transform_react_jsx_source:7.27.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+plugin-transform-react-jsx-source@7.27.1_@babel+core@7.28.4/node_modules/@babel/plugin-transform-react-jsx-source/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/runtime@7.28.4?package-id=f8da03e856492be1",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/runtime",
      "version": "7.28.4",
      "description": "babel's modular runtime helpers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/runtime:\\@babel\\/runtime:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/runtime@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-runtime",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/runtime:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+runtime@7.28.4/node_modules/@babel/runtime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/runtime@7.29.7?package-id=65a05102d091d91b",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/runtime",
      "version": "7.29.7",
      "description": "babel's modular runtime helpers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/runtime:\\@babel\\/runtime:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/runtime@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-runtime",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/runtime:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+runtime@7.29.7/node_modules/@babel/runtime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/template@7.27.2?package-id=2fb532d3b2e7d9d3",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/template",
      "version": "7.27.2",
      "description": "Generate an AST from a string template.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/template:\\@babel\\/template:7.27.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/template@7.27.2",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-template",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/template:7.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+template@7.27.2/node_modules/@babel/template/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/template@7.29.7?package-id=79aecf44ed94f36a",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/template",
      "version": "7.29.7",
      "description": "Generate an AST from a string template.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/template:\\@babel\\/template:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/template@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-template",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/template:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+template@7.29.7/node_modules/@babel/template/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/traverse@7.28.4?package-id=b2fc7ce19bda6b10",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/traverse",
      "version": "7.28.4",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/traverse:\\@babel\\/traverse:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/traverse@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-traverse",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/traverse:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+traverse@7.28.4/node_modules/@babel/traverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/traverse@7.29.7?package-id=0cf01502c7ae6d1e",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/traverse",
      "version": "7.29.7",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/traverse:\\@babel\\/traverse:7.29.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/traverse@7.29.7",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-traverse",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/traverse:7.29.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+traverse@7.29.7/node_modules/@babel/traverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/types@7.28.4?package-id=5dd0c8679e95e7b4",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/types",
      "version": "7.28.4",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.28.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/types@7.28.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-types",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/types:7.28.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+types@7.28.4/node_modules/@babel/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/types@7.29.8?package-id=0182243b949aaaa6",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/types",
      "version": "7.29.8",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.29.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/types@7.29.8",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-types",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/types:7.29.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+types@7.29.8/node_modules/@babel/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40babel/types@8.0.4?package-id=e6595568de33466f",
      "type": "library",
      "author": "The Babel Team (https://babel.dev/team)",
      "name": "@babel/types",
      "version": "8.0.4",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:8.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40babel/types@8.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/babel/babel.git",
          "type": "distribution"
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-types",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:babel:\\@babel\\/types:8.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@babel+types@8.0.4/node_modules/@babel/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40braintree/sanitize-url@7.1.1?package-id=a15959a55f95e987",
      "type": "library",
      "name": "@braintree/sanitize-url",
      "version": "7.1.1",
      "description": "A url sanitizer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:paypal:braintree\\/sanitize-url:7.1.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/%40braintree/sanitize-url@7.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/braintree/sanitize-url.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/braintree/sanitize-url#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@braintree+sanitize-url@7.1.1/node_modules/@braintree/sanitize-url/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40bufbuild/protobuf@2.13.0?package-id=eb2e98ea07483da6",
      "type": "library",
      "name": "@bufbuild/protobuf",
      "version": "2.13.0",
      "description": "Protocol Buffers for ECMAScript. The only JavaScript Protobuf library that is fully-compliant with Protobuf conformance tests.",
      "licenses": [
        {
          "expression": "Apache-2.0 AND BSD-3-Clause"
        }
      ],
      "cpe": "cpe:2.3:a:\\@bufbuild\\/protobuf:\\@bufbuild\\/protobuf:2.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40bufbuild/protobuf@2.13.0",
      "externalReferences": [
        {
          "url": "https://github.com/bufbuild/protobuf-es.git",
          "type": "distribution"
        },
        {
          "url": "https://protobufes.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bufbuild:\\@bufbuild\\/protobuf:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@bufbuild+protobuf@2.13.0/node_modules/@bufbuild/protobuf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/cdx-hbom@0.5.1?package-id=c940269d6ef0a8fd",
      "type": "library",
      "author": "Prabhu Subramanian <prabhu@appthreat.com>",
      "name": "@cdxgen/cdx-hbom",
      "version": "0.5.1",
      "description": "Dependency-free hardware bill of materials discovery library.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/cdx-hbom:\\@cdxgen\\/cdx-hbom:0.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/cdx-hbom@0.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdx-hbom.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/cdx-hbom",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx-hbom:\\@cdxgen\\/cdx_hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx_hbom:\\@cdxgen\\/cdx-hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx_hbom:\\@cdxgen\\/cdx_hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx:\\@cdxgen\\/cdx-hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx:\\@cdxgen\\/cdx_hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdx-hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdx_hbom:0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdx-hbom@0.5.1/node_modules/@cdxgen/cdx-hbom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/cdx-proto@2.2.0?package-id=e4985bd6699bf752",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@cdxgen/cdx-proto",
      "version": "2.2.0",
      "description": "Library to serialize/deserialize CycloneDX BOM with protocol buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/cdx-proto:\\@cdxgen\\/cdx-proto:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/cdx-proto@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdx-proto.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx-proto:\\@cdxgen\\/cdx_proto:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx_proto:\\@cdxgen\\/cdx-proto:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx_proto:\\@cdxgen\\/cdx_proto:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx:\\@cdxgen\\/cdx-proto:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdx:\\@cdxgen\\/cdx_proto:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdx-proto@2.2.0/node_modules/@cdxgen/cdx-proto/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/cdxgen-plugins-bin@2.5.1?package-id=99bd240ce6d69ce2",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@cdxgen/cdxgen-plugins-bin",
      "version": "2.5.1",
      "description": "Binary plugins to supercharge @cdxgen/cdxgen npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/cdxgen-plugins-bin@2.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/cdxgen-plugins-bin#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen-plugins-bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen_plugins_bin:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/cdxgen-plugins-bin-linux-amd64@2.5.1?package-id=5cc8b0af85eef30f",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@cdxgen/cdxgen-plugins-bin-linux-amd64",
      "version": "2.5.1",
      "description": "linux amd64 binary plugins to supercharge @cdxgen/cdxgen npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/cdxgen-plugins-bin-linux-amd64@2.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/cdxgen-plugins-bin#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linux:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linux:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linux:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linux:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen-plugins-bin-linux-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen_plugins_bin_linux_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/cdxgen-plugins-bin-linuxmusl-amd64@2.5.1?package-id=d5eff038a749c903",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64",
      "version": "2.5.1",
      "description": "Linux musl amd64 binary plugins to supercharge @cdxgen/cdxgen npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/cdxgen-plugins-bin-linuxmusl-amd64@2.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/cdxgen-plugins-bin#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins-bin:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins_bin:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen-plugins:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen_plugins:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/cdxgen:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen-plugins-bin-linuxmusl-amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/cdxgen_plugins_bin_linuxmusl_amd64:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/safer-exec@0.15.0?package-id=f6bbe0c082e0e68d",
      "type": "library",
      "author": "Team AppThreat <cloud@appthreat.com>",
      "name": "@cdxgen/safer-exec",
      "version": "0.15.0",
      "description": "OS-level sandboxing with tracing, auditing, crypto tracing (CBOM), and learning mode for arbitrary binaries.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/safer-exec:\\@cdxgen\\/safer-exec:0.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/safer-exec@0.15.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/safer-exec.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/safer-exec#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec:\\@cdxgen\\/safer_exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec:\\@cdxgen\\/safer-exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec:\\@cdxgen\\/safer_exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer:\\@cdxgen\\/safer-exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer:\\@cdxgen\\/safer_exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/safer-exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/safer_exec:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec@0.15.0/node_modules/@cdxgen/safer-exec/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cdxgen/safer-exec-linux-amd64@0.15.0?package-id=debab8f5c159fb5c",
      "type": "library",
      "name": "@cdxgen/safer-exec-linux-amd64",
      "version": "0.15.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cdxgen\\/safer-exec-linux-amd64:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cdxgen/safer-exec-linux-amd64@0.15.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/safer-exec.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cdxgen/safer-exec#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec-linux-amd64:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec_linux_amd64:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec_linux_amd64:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec-linux:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec-linux:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec_linux:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec_linux:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer-exec:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer_exec:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cdxgen\\/safer:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/safer-exec-linux-amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cdxgen\\/safer_exec_linux_amd64:0.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40chevrotain/cst-dts-gen@11.0.3?package-id=bf62d82256897bdd",
      "type": "library",
      "name": "@chevrotain/cst-dts-gen",
      "version": "11.0.3",
      "description": "Generates type definitions for Chevrotain CST nodes",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@chevrotain\\/cst-dts-gen:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40chevrotain/cst-dts-gen@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst-dts-gen:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst_dts_gen:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst_dts_gen:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst-dts:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst-dts:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst_dts:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst_dts:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/cst:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/cst-dts-gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/cst_dts_gen:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@chevrotain+cst-dts-gen@11.0.3/node_modules/@chevrotain/cst-dts-gen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40chevrotain/gast@11.0.3?package-id=2f77968e6f17625e",
      "type": "library",
      "name": "@chevrotain/gast",
      "version": "11.0.3",
      "description": "Grammar AST structure for Chevrotain Parsers",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@chevrotain\\/gast:\\@chevrotain\\/gast:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40chevrotain/gast@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/gast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@chevrotain+gast@11.0.3/node_modules/@chevrotain/gast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40chevrotain/regexp-to-ast@11.0.3?package-id=dffbfcd76bb2e5fb",
      "type": "library",
      "name": "@chevrotain/regexp-to-ast",
      "version": "11.0.3",
      "description": "Parses a Regular Expression and outputs an AST",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@chevrotain\\/regexp-to-ast:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40chevrotain/regexp-to-ast@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp-to-ast:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp_to_ast:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp_to_ast:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp-to:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp-to:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp_to:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp_to:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@chevrotain\\/regexp:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/regexp-to-ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/regexp_to_ast:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@chevrotain+regexp-to-ast@11.0.3/node_modules/@chevrotain/regexp-to-ast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40chevrotain/types@11.0.3?package-id=3e1ecd3385a5e5f1",
      "type": "library",
      "author": "Shahar Soel",
      "name": "@chevrotain/types",
      "version": "11.0.3",
      "description": "Type Signatures and API Website for Chevrotain",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@chevrotain\\/types:\\@chevrotain\\/types:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40chevrotain/types@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        },
        {
          "url": "https://chevrotain.io/documentation/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/types:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@chevrotain+types@11.0.3/node_modules/@chevrotain/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40chevrotain/utils@11.0.3?package-id=e8d03cb640fae249",
      "type": "library",
      "author": "Shahar Soel",
      "name": "@chevrotain/utils",
      "version": "11.0.3",
      "description": "common utilities",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@chevrotain\\/utils:\\@chevrotain\\/utils:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40chevrotain/utils@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Chevrotain:\\@chevrotain\\/utils:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@chevrotain+utils@11.0.3/node_modules/@chevrotain/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cyclonedx/cdxgen@12.8.3?package-id=01926d95e177bf12",
      "type": "library",
      "author": "Prabhu Subramanian <prabhu@appthreat.com>, Erlend Oftedal, Steve Springett <steve.springett@owasp.org> (https://about.me/stevespringett), Prabhu Subramanian (https://github.com/prabhu), Adam Setch (https://github.com/setchy), Roland Asmann (https://github.com/malice00)",
      "name": "@cyclonedx/cdxgen",
      "version": "12.8.3",
      "description": "Creates CycloneDX Software Bill of Materials (SBOM) from source or container image",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cyclonedx\\/cdxgen:\\@cyclonedx\\/cdxgen:12.8.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/cdxgen/cdxgen.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cdxgen/cdxgen",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:\\@cyclonedx\\/cdxgen:12.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cyclonedx+cdxgen@12.8.3/node_modules/@cyclonedx/cdxgen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cyclonedx/cyclonedx-library@10.1.1?package-id=c7dc26f7f38e09a7",
      "type": "library",
      "author": "Jan Kowalleck (https://github.com/jkowalleck), Jan Kowalleck (https://github.com/jkowalleck), Craig Andrews (https://github.com/candrews), Peter Wagner (https://github.com/thepwagner), Xavier Maso (https://github.com/xmasoracle), mLuca (https://github.com/mLuca), Augustus Kling (https://github.com/AugustusKling), Jan Kowalleck (https://github.com/jkowalleck)",
      "name": "@cyclonedx/cyclonedx-library",
      "version": "10.1.1",
      "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx-library:\\@cyclonedx\\/cyclonedx-library:10.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@10.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx-library:\\@cyclonedx\\/cyclonedx_library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx_library:\\@cyclonedx\\/cyclonedx-library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx_library:\\@cyclonedx\\/cyclonedx_library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx:\\@cyclonedx\\/cyclonedx-library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx:\\@cyclonedx\\/cyclonedx_library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:\\@cyclonedx\\/cyclonedx-library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:\\@cyclonedx\\/cyclonedx_library:10.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cyclonedx+cyclonedx-library@10.1.1_ajv-formats-draft2019@1.6.1_ajv@8.20.0__ajv-formats_39a81f52a986d2f48b7ad3aa70a57ee9/node_modules/@cyclonedx/cyclonedx-library/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40cyclonedx/cyclonedx-npm@6.0.1?package-id=b717104f8a303e74",
      "type": "library",
      "author": "Jan Kowalleck (https://github.com/jkowalleck), Jan Kowalleck (https://github.com/jkowalleck), Alex Miller <codex.nz@gmail.com>, Malick Burger <malickjackburger@gmail.com> (https://github.com/MalickBurger), Igor Dimitrijevic (https://github.com/igord), Arthur Lutz (https://github.com/arthurlutz), Joona Heinikoski (https://github.com/joonamo), cuhland (https://github.com/cuhland)",
      "name": "@cyclonedx/cyclonedx-npm",
      "version": "6.0.1",
      "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx-npm:\\@cyclonedx\\/cyclonedx-npm:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40cyclonedx/cyclonedx-npm@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx-npm:\\@cyclonedx\\/cyclonedx_npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx_npm:\\@cyclonedx\\/cyclonedx-npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx_npm:\\@cyclonedx\\/cyclonedx_npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx:\\@cyclonedx\\/cyclonedx-npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@cyclonedx\\/cyclonedx:\\@cyclonedx\\/cyclonedx_npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:\\@cyclonedx\\/cyclonedx-npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:\\@cyclonedx\\/cyclonedx_npm:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cyclonedx+cyclonedx-npm@6.0.1/node_modules/@cyclonedx/cyclonedx-npm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40date-fns/tz@1.4.1?package-id=499d884c20090435",
      "type": "library",
      "author": "Sasha Koss <koss@nocorp.me>",
      "name": "@date-fns/tz",
      "version": "1.4.1",
      "description": "date-fns timezone utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@date-fns\\/tz:\\@date-fns\\/tz:1.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40date-fns/tz@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/date-fns/tz.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/date-fns/tz#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@date-fns\\/tz:\\@date_fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@date_fns\\/tz:\\@date-fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@date_fns\\/tz:\\@date_fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns:\\@date-fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns:\\@date_fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@date:\\@date-fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@date:\\@date_fns\\/tz:1.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@date-fns+tz@1.4.1/node_modules/@date-fns/tz/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40esbuild/linux-x64@0.21.5?package-id=2f4b2bacdc623af9",
      "type": "library",
      "name": "@esbuild/linux-x64",
      "version": "0.21.5",
      "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux-x64:0.21.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40esbuild/linux-x64@0.21.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/esbuild.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux_x64:0.21.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux-x64:0.21.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux_x64:0.21.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux-x64:0.21.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux_x64:0.21.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.21.5/node_modules/@esbuild/linux-x64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40esbuild/linux-x64@0.25.10?package-id=4211278be4f62c6d",
      "type": "library",
      "name": "@esbuild/linux-x64",
      "version": "0.25.10",
      "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux-x64:0.25.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40esbuild/linux-x64@0.25.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/esbuild.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux_x64:0.25.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux-x64:0.25.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux_x64:0.25.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux-x64:0.25.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux_x64:0.25.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.25.10/node_modules/@esbuild/linux-x64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40fast-csv/format@4.3.5?package-id=95164eef8d87a47f",
      "type": "library",
      "author": "doug-martin <doug@dougamartin.com>",
      "name": "@fast-csv/format",
      "version": "4.3.5",
      "description": "fast-csv formatting module",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@fast-csv\\/format:\\@fast-csv\\/format:4.3.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40fast-csv/format@4.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/C2FO/fast-csv.git",
          "type": "distribution"
        },
        {
          "url": "http://c2fo.github.com/fast-csv/packages/format",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast-csv\\/format:\\@fast_csv\\/format:4.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast_csv\\/format:\\@fast-csv\\/format:4.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast_csv\\/format:\\@fast_csv\\/format:4.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast:\\@fast-csv\\/format:4.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast:\\@fast_csv\\/format:4.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@fast-csv+format@4.3.5/node_modules/@fast-csv/format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40fast-csv/parse@4.3.6?package-id=5bad080114a3946f",
      "type": "library",
      "author": "doug-martin <doug@dougamartin.com>",
      "name": "@fast-csv/parse",
      "version": "4.3.6",
      "description": "fast-csv parsing package",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@fast-csv\\/parse:\\@fast-csv\\/parse:4.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40fast-csv/parse@4.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/C2FO/fast-csv.git",
          "type": "distribution"
        },
        {
          "url": "http://c2fo.github.com/fast-csv/packages/parse",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast-csv\\/parse:\\@fast_csv\\/parse:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast_csv\\/parse:\\@fast-csv\\/parse:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast_csv\\/parse:\\@fast_csv\\/parse:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast:\\@fast-csv\\/parse:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@fast:\\@fast_csv\\/parse:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@fast-csv+parse@4.3.6/node_modules/@fast-csv/parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40floating-ui/core@1.7.3?package-id=e8a629f059fe1d53",
      "type": "library",
      "author": "atomiks",
      "name": "@floating-ui/core",
      "version": "1.7.3",
      "description": "Positioning library for floating elements: tooltips, popovers, dropdowns, and more",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@floating-ui\\/core:\\@floating-ui\\/core:1.7.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40floating-ui/core@1.7.3",
      "externalReferences": [
        {
          "url": "https://github.com/floating-ui/floating-ui.git",
          "type": "distribution"
        },
        {
          "url": "https://floating-ui.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/core:\\@floating_ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/core:\\@floating-ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/core:\\@floating_ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating-ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating_ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating-ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating_ui\\/core:1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@floating-ui+core@1.7.3/node_modules/@floating-ui/core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40floating-ui/dom@1.7.4?package-id=d8f626c27981cda3",
      "type": "library",
      "author": "atomiks",
      "name": "@floating-ui/dom",
      "version": "1.7.4",
      "description": "Floating UI for the web",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@floating-ui\\/dom:\\@floating-ui\\/dom:1.7.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40floating-ui/dom@1.7.4",
      "externalReferences": [
        {
          "url": "https://github.com/floating-ui/floating-ui.git",
          "type": "distribution"
        },
        {
          "url": "https://floating-ui.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/dom:\\@floating_ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/dom:\\@floating-ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/dom:\\@floating_ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating-ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating_ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating-ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating_ui\\/dom:1.7.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@floating-ui+dom@1.7.4/node_modules/@floating-ui/dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40floating-ui/react-dom@2.1.6?package-id=46c2b27b6241b3c1",
      "type": "library",
      "author": "atomiks",
      "name": "@floating-ui/react-dom",
      "version": "2.1.6",
      "description": "Floating UI for React DOM",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@floating-ui\\/react-dom:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40floating-ui/react-dom@2.1.6",
      "externalReferences": [
        {
          "url": "https://github.com/floating-ui/floating-ui.git",
          "type": "distribution"
        },
        {
          "url": "https://floating-ui.com/docs/react-dom",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/react-dom:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/react_dom:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/react_dom:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/react:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/react:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/react:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/react:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating-ui\\/react-dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating_ui\\/react_dom:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@floating-ui+react-dom@2.1.6_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/@floating-ui/react-dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40floating-ui/utils@0.2.10?package-id=0e0b52dad3be6d9e",
      "type": "library",
      "author": "atomiks",
      "name": "@floating-ui/utils",
      "version": "0.2.10",
      "description": "Utilities for Floating UI",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@floating-ui\\/utils:\\@floating-ui\\/utils:0.2.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40floating-ui/utils@0.2.10",
      "externalReferences": [
        {
          "url": "https://github.com/floating-ui/floating-ui.git",
          "type": "distribution"
        },
        {
          "url": "https://floating-ui.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating-ui\\/utils:\\@floating_ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/utils:\\@floating-ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating_ui\\/utils:\\@floating_ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating-ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:floating-ui:\\@floating_ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating-ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@floating:\\@floating_ui\\/utils:0.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@floating-ui+utils@0.2.10/node_modules/@floating-ui/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40gar/promise-retry@1.0.3?package-id=26a2975ef38acd6e",
      "type": "library",
      "name": "@gar/promise-retry",
      "version": "1.0.3",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@gar\\/promise-retry:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40gar/promise-retry@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/wraithgar/node-promise-retry.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise-retry:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise_retry:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise_retry:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@gar\\/promise:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wraithgar:\\@gar\\/promise-retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wraithgar:\\@gar\\/promise_retry:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@gar+promise-retry@1.0.3/node_modules/@gar/promise-retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40grpc/grpc-js@1.14.4?package-id=2359fc519576f6e4",
      "type": "library",
      "author": "Google Inc., Google Inc.",
      "name": "@grpc/grpc-js",
      "version": "1.14.4",
      "description": "gRPC Library for Node - pure JS implementation",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:grpc:grpc:1.14.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/%40grpc/grpc-js@1.14.4",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-node/tree/master/packages/grpc-js",
          "type": "distribution"
        },
        {
          "url": "https://grpc.io/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@grpc+grpc-js@1.14.4/node_modules/@grpc/grpc-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40grpc/proto-loader@0.8.1?package-id=c3a2d15ad9c2f3ab",
      "type": "library",
      "author": "Google Inc., Michael Lumish <mlumish@google.com>",
      "name": "@grpc/proto-loader",
      "version": "0.8.1",
      "description": "gRPC utility library for loading .proto files",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@grpc\\/proto-loader:\\@grpc\\/proto-loader:0.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40grpc/proto-loader@0.8.1",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-node.git",
          "type": "distribution"
        },
        {
          "url": "https://grpc.io/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@grpc\\/proto-loader:\\@grpc\\/proto_loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@grpc\\/proto_loader:\\@grpc\\/proto-loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@grpc\\/proto_loader:\\@grpc\\/proto_loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@grpc\\/proto:\\@grpc\\/proto-loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@grpc\\/proto:\\@grpc\\/proto_loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:\\@grpc\\/proto-loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:\\@grpc\\/proto_loader:0.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@grpc+proto-loader@0.8.1/node_modules/@grpc/proto-loader/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers@5.2.2?package-id=88b717d2d887d8bf",
      "type": "library",
      "author": "bluebill1049 <bluebill1049@hotmail.com>",
      "name": "@hookform/resolvers",
      "version": "5.2.2",
      "description": "React Hook Form validation resolvers: Yup, Joi, Superstruct, Zod, Vest, Class Validator, io-ts, Nope, computed-types, TypeBox, arktype, Typanion, Effect-TS and VineJS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers:\\@hookform\\/resolvers:5.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers@5.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/react-hook-form/resolvers.git",
          "type": "distribution"
        },
        {
          "url": "https://react-hook-form.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fajv@1.0.0?package-id=98469b3b6ee96da7",
      "type": "library",
      "name": "@hookform/resolvers/ajv",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: ajv",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/ajv:\\@hookform\\/resolvers\\/ajv:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fajv@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/ajv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Farktype@2.0.0?package-id=e5a75e86ca268e0c",
      "type": "library",
      "name": "@hookform/resolvers/arktype",
      "version": "2.0.0",
      "description": "React Hook Form validation resolver: arktype",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/arktype:\\@hookform\\/resolvers\\/arktype:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Farktype@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/arktype/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fclass-validator@1.0.0?package-id=2c281bb64e6adba1",
      "type": "library",
      "name": "@hookform/resolvers/class-validator",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: class-validator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/class-validator:\\@hookform\\/resolvers\\/class-validator:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fclass-validator@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/class-validator:\\@hookform\\/resolvers\\/class_validator:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/class_validator:\\@hookform\\/resolvers\\/class-validator:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/class_validator:\\@hookform\\/resolvers\\/class_validator:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/class:\\@hookform\\/resolvers\\/class-validator:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/class:\\@hookform\\/resolvers\\/class_validator:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/class-validator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fcomputed-types@1.0.0?package-id=14220da09a3d18b1",
      "type": "library",
      "name": "@hookform/resolvers/computed-types",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: computed-types",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed-types:\\@hookform\\/resolvers\\/computed-types:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fcomputed-types@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed-types:\\@hookform\\/resolvers\\/computed_types:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed_types:\\@hookform\\/resolvers\\/computed-types:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed_types:\\@hookform\\/resolvers\\/computed_types:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed:\\@hookform\\/resolvers\\/computed-types:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/computed:\\@hookform\\/resolvers\\/computed_types:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/computed-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Feffect-ts@1.0.0?package-id=a148cbd4f4bb773d",
      "type": "library",
      "name": "@hookform/resolvers/effect-ts",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: effect-ts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect-ts:\\@hookform\\/resolvers\\/effect-ts:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Feffect-ts@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect-ts:\\@hookform\\/resolvers\\/effect_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect_ts:\\@hookform\\/resolvers\\/effect-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect_ts:\\@hookform\\/resolvers\\/effect_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect:\\@hookform\\/resolvers\\/effect-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/effect:\\@hookform\\/resolvers\\/effect_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/effect-ts/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Ffluentvalidation-ts@1.0.0?package-id=3b79a2e1aae35260",
      "type": "library",
      "name": "@hookform/resolvers/fluentvalidation-ts",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: fluentvalidation-ts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation-ts:\\@hookform\\/resolvers\\/fluentvalidation-ts:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Ffluentvalidation-ts@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation-ts:\\@hookform\\/resolvers\\/fluentvalidation_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation_ts:\\@hookform\\/resolvers\\/fluentvalidation-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation_ts:\\@hookform\\/resolvers\\/fluentvalidation_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation:\\@hookform\\/resolvers\\/fluentvalidation-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/fluentvalidation:\\@hookform\\/resolvers\\/fluentvalidation_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/fluentvalidation-ts/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fio-ts@1.0.0?package-id=bd6bd81731676c3a",
      "type": "library",
      "name": "@hookform/resolvers/io-ts",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: io-ts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/io-ts:\\@hookform\\/resolvers\\/io-ts:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fio-ts@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/io-ts:\\@hookform\\/resolvers\\/io_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/io_ts:\\@hookform\\/resolvers\\/io-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/io_ts:\\@hookform\\/resolvers\\/io_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/io:\\@hookform\\/resolvers\\/io-ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/io:\\@hookform\\/resolvers\\/io_ts:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/io-ts/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fjoi@1.0.0?package-id=a035508c4a3fd42b",
      "type": "library",
      "name": "@hookform/resolvers/joi",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: joi",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/joi:\\@hookform\\/resolvers\\/joi:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fjoi@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/joi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fnope@1.0.0?package-id=afbdef7a4a98f16a",
      "type": "library",
      "name": "@hookform/resolvers/nope",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: nope",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/nope:\\@hookform\\/resolvers\\/nope:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fnope@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/nope/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fstandard-schema@1.0.0?package-id=4170f4e5ded35462",
      "type": "library",
      "name": "@hookform/resolvers/standard-schema",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: standard-schema",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard-schema:\\@hookform\\/resolvers\\/standard-schema:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fstandard-schema@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard-schema:\\@hookform\\/resolvers\\/standard_schema:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard_schema:\\@hookform\\/resolvers\\/standard-schema:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard_schema:\\@hookform\\/resolvers\\/standard_schema:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard:\\@hookform\\/resolvers\\/standard-schema:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@hookform\\/resolvers\\/standard:\\@hookform\\/resolvers\\/standard_schema:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/standard-schema/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fsuperstruct@1.0.0?package-id=24cace0c5d48e351",
      "type": "library",
      "name": "@hookform/resolvers/superstruct",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: superstruct",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/superstruct:\\@hookform\\/resolvers\\/superstruct:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fsuperstruct@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/superstruct/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Ftypanion@1.0.0?package-id=5d7bb85ac8a8c13a",
      "type": "library",
      "name": "@hookform/resolvers/typanion",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: typanion",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/typanion:\\@hookform\\/resolvers\\/typanion:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Ftypanion@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/typanion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Ftypebox@1.0.0?package-id=4a9681b1a0219f41",
      "type": "library",
      "name": "@hookform/resolvers/typebox",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: typebox",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/typebox:\\@hookform\\/resolvers\\/typebox:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Ftypebox@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/typebox/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Ftypeschema@1.0.0?package-id=6e91d1dd093ac7ea",
      "type": "library",
      "name": "@hookform/resolvers/typeschema",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: typeschema",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/typeschema:\\@hookform\\/resolvers\\/typeschema:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Ftypeschema@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/typeschema/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fvalibot@1.0.0?package-id=2ed87d6cfda8de3e",
      "type": "library",
      "name": "@hookform/resolvers/valibot",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: valibot",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/valibot:\\@hookform\\/resolvers\\/valibot:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fvalibot@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/valibot/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fvest@1.0.0?package-id=b892e8bbbb7c44ac",
      "type": "library",
      "name": "@hookform/resolvers/vest",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: vest",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/vest:\\@hookform\\/resolvers\\/vest:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fvest@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/vest/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fvine@1.0.0?package-id=6bccb038c110beef",
      "type": "library",
      "name": "@hookform/resolvers/vine",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: vine",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/vine:\\@hookform\\/resolvers\\/vine:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fvine@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/vine/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fyup@1.0.0?package-id=a3fd75cca2863726",
      "type": "library",
      "name": "@hookform/resolvers/yup",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: yup",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/yup:\\@hookform\\/resolvers\\/yup:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fyup@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/yup/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40hookform/resolvers%2Fzod@1.0.0?package-id=56921bac3e010148",
      "type": "library",
      "name": "@hookform/resolvers/zod",
      "version": "1.0.0",
      "description": "React Hook Form validation resolver: zod",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@hookform\\/resolvers\\/zod:\\@hookform\\/resolvers\\/zod:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40hookform/resolvers%2Fzod@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.64.0_react@19.2.1_/node_modules/@hookform/resolvers/zod/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40iarna/toml@2.2.5?package-id=f0fe9323fbf767b4",
      "type": "library",
      "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
      "name": "@iarna/toml",
      "version": "2.2.5",
      "description": "Better TOML parsing and stringifying all in that familiar JSON interface.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@iarna\\/toml:\\@iarna\\/toml:2.2.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40iarna/toml@2.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/iarna-toml.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/iarna-toml#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:\\@iarna\\/toml:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40iconify/types@2.0.0?package-id=adc8cc345491fa4e",
      "type": "library",
      "author": "Vjacheslav Trushkin",
      "name": "@iconify/types",
      "version": "2.0.0",
      "description": "Types for Iconify data",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@iconify\\/types:\\@iconify\\/types:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40iconify/types@2.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/iconify/iconify.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iconify/iconify",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconify:\\@iconify\\/types:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@iconify+types@2.0.0/node_modules/@iconify/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40iconify/utils@3.0.2?package-id=70d9138bd31d1b58",
      "type": "library",
      "author": "Vjacheslav Trushkin",
      "name": "@iconify/utils",
      "version": "3.0.2",
      "description": "Common functions for working with Iconify icon sets used by various packages.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@iconify\\/utils:\\@iconify\\/utils:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40iconify/utils@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/iconify/iconify.git",
          "type": "distribution"
        },
        {
          "url": "https://iconify.design/docs/libraries/utils/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconify:\\@iconify\\/utils:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@iconify+utils@3.0.2/node_modules/@iconify/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/cliui@8.0.2?package-id=2755441b13d081a7",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "@isaacs/cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@isaacs+cliui@8.0.2/node_modules/@isaacs/cliui/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/cliui@8.0.2?package-id=6aa488d469200921",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "@isaacs/cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/@isaacs/cliui/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/cliui@8.0.2?package-id=a82d332383092fc4",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "@isaacs/cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=1b5c7b6f4f90872a",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "@isaacs/fs-minipass",
      "version": "4.0.1",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@isaacs+fs-minipass@4.0.1/node_modules/@isaacs/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=8909de7f0e74e192",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "@isaacs/fs-minipass",
      "version": "4.0.1",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/@isaacs/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=3085262f515fb17b",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "@isaacs/fs-minipass",
      "version": "4.0.1",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=c3f089cf018f75ff",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "@isaacs/string-locale-compare",
      "version": "1.1.0",
      "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/string-locale-compare",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@isaacs+string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=51cc50312457ec35",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "@isaacs/string-locale-compare",
      "version": "1.1.0",
      "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/string-locale-compare",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40jridgewell/gen-mapping@0.3.13?package-id=47cfe6400b02a70a",
      "type": "library",
      "author": "Justin Ridgewell <justin@ridgewell.name>",
      "name": "@jridgewell/gen-mapping",
      "version": "0.3.13",
      "description": "Generate source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@jridgewell\\/gen-mapping:\\@jridgewell\\/gen-mapping:0.3.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/gen-mapping:\\@jridgewell\\/gen_mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/gen_mapping:\\@jridgewell\\/gen-mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/gen_mapping:\\@jridgewell\\/gen_mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/gen:\\@jridgewell\\/gen-mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/gen:\\@jridgewell\\/gen_mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/gen-mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/gen_mapping:0.3.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40jridgewell/remapping@2.3.5?package-id=b44a4f38a3303907",
      "type": "library",
      "author": "Justin Ridgewell <justin@ridgewell.name>",
      "name": "@jridgewell/remapping",
      "version": "2.3.5",
      "description": "Remap sequential sourcemaps through transformations to point at the original source code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@jridgewell\\/remapping:\\@jridgewell\\/remapping:2.3.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40jridgewell/remapping@2.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/remapping",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/remapping:2.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@jridgewell+remapping@2.3.5/node_modules/@jridgewell/remapping/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40jridgewell/resolve-uri@3.1.2?package-id=f87eebfc7c0ba923",
      "type": "library",
      "author": "Justin Ridgewell <justin@ridgewell.name>",
      "name": "@jridgewell/resolve-uri",
      "version": "3.1.2",
      "description": "Resolve a URI relative to an optional base URI",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@jridgewell\\/resolve-uri:\\@jridgewell\\/resolve-uri:3.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/jridgewell/resolve-uri",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/resolve-uri:\\@jridgewell\\/resolve_uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/resolve_uri:\\@jridgewell\\/resolve-uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/resolve_uri:\\@jridgewell\\/resolve_uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/resolve:\\@jridgewell\\/resolve-uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/resolve:\\@jridgewell\\/resolve_uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/resolve-uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/resolve_uri:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@jridgewell+resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5?package-id=65976ff7800a5be2",
      "type": "library",
      "author": "Justin Ridgewell <justin@ridgewell.name>",
      "name": "@jridgewell/sourcemap-codec",
      "version": "1.5.5",
      "description": "Encode/decode sourcemap mappings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap-codec:1.5.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap_codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap-codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap_codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap-codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap_codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/sourcemap-codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/sourcemap_codec:1.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@jridgewell+sourcemap-codec@1.5.5/node_modules/@jridgewell/sourcemap-codec/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40jridgewell/trace-mapping@0.3.31?package-id=c2ed178bde4d2443",
      "type": "library",
      "author": "Justin Ridgewell <justin@ridgewell.name>",
      "name": "@jridgewell/trace-mapping",
      "version": "0.3.31",
      "description": "Trace the original position through a source map",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@jridgewell\\/trace-mapping:\\@jridgewell\\/trace-mapping:0.3.31:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/trace-mapping:\\@jridgewell\\/trace_mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/trace_mapping:\\@jridgewell\\/trace-mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/trace_mapping:\\@jridgewell\\/trace_mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/trace:\\@jridgewell\\/trace-mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@jridgewell\\/trace:\\@jridgewell\\/trace_mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/trace-mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/trace_mapping:0.3.31:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40js-sdsl/ordered-map@4.4.2?package-id=bef43f70855ee3de",
      "type": "library",
      "author": "ZLY201 <951711127@qq.com> (https://github.com/js-sdsl/js-sdsl)",
      "name": "@js-sdsl/ordered-map",
      "version": "4.4.2",
      "description": "javascript standard data structure library which benchmark against C++ STL",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@js-sdsl\\/ordered-map:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40js-sdsl/ordered-map@4.4.2",
      "externalReferences": [
        {
          "url": "https://github.com/js-sdsl/js-sdsl.git",
          "type": "distribution"
        },
        {
          "url": "https://js-sdsl.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js-sdsl\\/ordered-map:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js_sdsl\\/ordered_map:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js_sdsl\\/ordered_map:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js-sdsl\\/ordered:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js-sdsl\\/ordered:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js_sdsl\\/ordered:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js_sdsl\\/ordered:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js-sdsl:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js-sdsl:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js:\\@js-sdsl\\/ordered-map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@js:\\@js_sdsl\\/ordered_map:4.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@js-sdsl+ordered-map@4.4.2/node_modules/@js-sdsl/ordered-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40mermaid-js/parser@0.6.3?package-id=af84196851788f98",
      "type": "library",
      "author": "Yokozuna59, Yokozuna59, Sidharth Vinod (https://sidharth.dev)",
      "name": "@mermaid-js/parser",
      "version": "0.6.3",
      "description": "MermaidJS parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@mermaid-js\\/parser:\\@mermaid-js\\/parser:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40mermaid-js/parser@0.6.3",
      "externalReferences": [
        {
          "url": "https://github.com/mermaid-js/mermaid.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mermaid-js/mermaid/tree/develop/packages/mermaid/parser/#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@mermaid-js\\/parser:\\@mermaid_js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@mermaid_js\\/parser:\\@mermaid-js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@mermaid_js\\/parser:\\@mermaid_js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mermaid-js:\\@mermaid-js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mermaid-js:\\@mermaid_js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@mermaid:\\@mermaid-js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@mermaid:\\@mermaid_js\\/parser:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@mermaid-js+parser@0.6.3/node_modules/@mermaid-js/parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40noble/curves@1.2.0?package-id=8adadbc52d7c2112",
      "type": "library",
      "author": "Paul Miller (https://paulmillr.com)",
      "name": "@noble/curves",
      "version": "1.2.0",
      "description": "Audited & minimal JS implementation of elliptic curve cryptography",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40noble/curves@1.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/paulmillr/noble-curves.git",
          "type": "distribution"
        },
        {
          "url": "https://paulmillr.com/noble/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@noble+curves@1.2.0/node_modules/@noble/curves/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40noble/curves@1.9.7?package-id=840cc527aae03af1",
      "type": "library",
      "author": "Paul Miller (https://paulmillr.com)",
      "name": "@noble/curves",
      "version": "1.9.7",
      "description": "Audited & minimal JS implementation of elliptic curve cryptography",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.9.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40noble/curves@1.9.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/paulmillr/noble-curves.git",
          "type": "distribution"
        },
        {
          "url": "https://paulmillr.com/noble/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@noble+curves@1.9.7/node_modules/@noble/curves/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40noble/hashes@1.3.2?package-id=5d595aa9d9901601",
      "type": "library",
      "author": "Paul Miller (https://paulmillr.com)",
      "name": "@noble/hashes",
      "version": "1.3.2",
      "description": "Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40noble/hashes@1.3.2",
      "externalReferences": [
        {
          "url": "https://github.com/paulmillr/noble-hashes.git",
          "type": "distribution"
        },
        {
          "url": "https://paulmillr.com/noble/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@noble+hashes@1.3.2/node_modules/@noble/hashes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40noble/hashes@1.8.0?package-id=a33fbd4cc269325b",
      "type": "library",
      "author": "Paul Miller (https://paulmillr.com)",
      "name": "@noble/hashes",
      "version": "1.8.0",
      "description": "Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.8.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40noble/hashes@1.8.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/paulmillr/noble-hashes.git",
          "type": "distribution"
        },
        {
          "url": "https://paulmillr.com/noble/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/agent@3.0.0?package-id=0cfdc03e09d1b898",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/agent",
      "version": "3.0.0",
      "description": "the http/https agent used by the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/agent@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/agent.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/agent#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+agent@3.0.0/node_modules/@npmcli/agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/agent@3.0.0?package-id=72f65868156b9038",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/agent",
      "version": "3.0.0",
      "description": "the http/https agent used by the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/agent@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/agent.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/agent#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/@npmcli/agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/agent@3.0.0?package-id=48ac69f6bc23336c",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/agent",
      "version": "3.0.0",
      "description": "the http/https agent used by the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/agent@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/agent.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/agent#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/arborist@8.0.5?package-id=cc7ea10106ab27ac",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/arborist",
      "version": "8.0.5",
      "description": "Manage node_modules trees",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:arborist:8.0.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/%40npmcli/arborist@8.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/config@9.0.0?package-id=cd655055ff16a245",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/config",
      "version": "9.0.0",
      "description": "Configuration management for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:9.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/config@9.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/fs@4.0.0?package-id=6057d628914730b6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/fs",
      "version": "4.0.0",
      "description": "filesystem utilities for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/fs@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+fs@4.0.0/node_modules/@npmcli/fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/fs@4.0.0?package-id=27b7abe349e5f093",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/fs",
      "version": "4.0.0",
      "description": "filesystem utilities for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/fs@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/@npmcli/fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/fs@4.0.0?package-id=17d8e9353080bbfd",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/fs",
      "version": "4.0.0",
      "description": "filesystem utilities for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/fs@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/fs@5.0.0?package-id=d7a1bc6c503654e8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/fs",
      "version": "5.0.0",
      "description": "filesystem utilities for the npm cli",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/fs@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+fs@5.0.0/node_modules/@npmcli/fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/git@6.0.3?package-id=ab52d450f37f64bf",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/git",
      "version": "6.0.3",
      "description": "a util for spawning git from npm CLI contexts",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/git@6.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/git.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/git@7.0.2?package-id=822c0fe3f50154bf",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/git",
      "version": "7.0.2",
      "description": "a util for spawning git from npm CLI contexts",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/git@7.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/git.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+git@7.0.2/node_modules/@npmcli/git/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@3.0.0?package-id=9bc137647a9e8aec",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/installed-package-contents",
      "version": "3.0.0",
      "description": "Get the list of files installed in a package in node_modules, including bundled dependencies",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/installed-package-contents@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/installed-package-contents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed_package_contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed-package-contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed_package_contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed-package-contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed_package_contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed-package-contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed_package_contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed-package-contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed_package_contents:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/map-workspaces@4.0.2?package-id=57fd30ea6ab1f4c6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/map-workspaces",
      "version": "4.0.2",
      "description": "Retrieves a name:pathname Map for a given workspaces config",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/map-workspaces@4.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/map-workspaces.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map_workspaces:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map-workspaces:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map_workspaces:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map-workspaces:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map_workspaces:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/map-workspaces@5.0.3?package-id=b2fa989da8c6cfb8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/map-workspaces",
      "version": "5.0.3",
      "description": "Retrieves a name:pathname Map for a given workspaces config",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/map-workspaces@5.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/map-workspaces.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map-workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map_workspaces:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+map-workspaces@5.0.3/node_modules/@npmcli/map-workspaces/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@8.0.1?package-id=a2ebe3a60703f214",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/metavuln-calculator",
      "version": "8.0.1",
      "description": "Calculate meta-vulnerabilities from package security advisories",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:8.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/metavuln-calculator@8.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/metavuln-calculator.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln_calculator:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln-calculator:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln_calculator:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln-calculator:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln_calculator:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/name-from-folder@3.0.0?package-id=bcf2c51c5c12ec4c",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/name-from-folder",
      "version": "3.0.0",
      "description": "Get the package name from a folder path",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/name-from-folder@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/name-from-folder.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name_from_folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name-from-folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name_from_folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name-from-folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name_from_folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name-from-folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name_from_folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name-from-folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name_from_folder:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/name-from-folder@4.0.0?package-id=d702600fc3c05420",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/name-from-folder",
      "version": "4.0.0",
      "description": "Get the package name from a folder path",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/name-from-folder@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/name-from-folder.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name-from-folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name_from_folder:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+name-from-folder@4.0.0/node_modules/@npmcli/name-from-folder/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/node-gyp@4.0.0?package-id=6ff256e1d1284c52",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/node-gyp",
      "version": "4.0.0",
      "description": "Tools for dealing with node-gyp packages",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/node-gyp@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node_gyp:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node-gyp:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node_gyp:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node-gyp:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node_gyp:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/package-json@6.2.0?package-id=88a0271a864306e0",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/package-json",
      "version": "6.2.0",
      "description": "Programmatic API to update package.json",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:6.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/package-json@6.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/package-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package_json:6.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package-json:6.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package_json:6.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package-json:6.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package_json:6.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/package-json@7.0.5?package-id=371ec1a2939489d2",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/package-json",
      "version": "7.0.5",
      "description": "Programmatic API to update package.json",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/package-json@7.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/package-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package-json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package_json:7.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+package-json@7.0.5/node_modules/@npmcli/package-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/promise-spawn@8.0.3?package-id=569d9516f2c815e5",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/promise-spawn",
      "version": "8.0.3",
      "description": "spawn processes the way the npm cli likes to do",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:8.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/promise-spawn@8.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/promise-spawn.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise_spawn:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise-spawn:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise_spawn:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise-spawn:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise_spawn:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/promise-spawn@9.0.1?package-id=188858ac2ab3a7b6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/promise-spawn",
      "version": "9.0.1",
      "description": "spawn processes the way the npm cli likes to do",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/promise-spawn@9.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/promise-spawn.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise-spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise_spawn:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@npmcli+promise-spawn@9.0.1/node_modules/@npmcli/promise-spawn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/query@4.0.1?package-id=55739eb0f55ef91f",
      "type": "library",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "@npmcli/query",
      "version": "4.0.1",
      "description": "npm query parser and tools",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/query@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/query.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/redact@3.2.2?package-id=2afdec2d42179fdd",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/redact",
      "version": "3.2.2",
      "description": "Redact sensitive npm information from output",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/redact:\\@npmcli\\/redact:3.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/redact@3.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/redact.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/redact/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40npmcli/run-script@9.1.0?package-id=cb79b36f1a73c210",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "@npmcli/run-script",
      "version": "9.1.0",
      "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:9.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40npmcli/run-script@9.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/run-script.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run_script:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run-script:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run_script:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run-script:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run_script:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40oozcitak/dom@2.0.2?package-id=8f61b3f89216ff04",
      "type": "library",
      "author": "Ozgur Ozcitak <oozcitak@gmail.com>",
      "name": "@oozcitak/dom",
      "version": "2.0.2",
      "description": "A modern DOM implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@oozcitak\\/dom:\\@oozcitak\\/dom:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40oozcitak/dom@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/oozcitak/dom.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/oozcitak/dom",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oozcitak:\\@oozcitak\\/dom:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@oozcitak+dom@2.0.2/node_modules/@oozcitak/dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40oozcitak/infra@2.0.2?package-id=5f1c315e30fd1128",
      "type": "library",
      "author": "Ozgur Ozcitak <oozcitak@gmail.com>",
      "name": "@oozcitak/infra",
      "version": "2.0.2",
      "description": "An implementation of the Infra Living Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@oozcitak\\/infra:\\@oozcitak\\/infra:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40oozcitak/infra@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/oozcitak/infra.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/oozcitak/infra",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oozcitak:\\@oozcitak\\/infra:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@oozcitak+infra@2.0.2/node_modules/@oozcitak/infra/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40oozcitak/url@3.0.0?package-id=72ff78b9631086c6",
      "type": "library",
      "author": "Ozgur Ozcitak <oozcitak@gmail.com>",
      "name": "@oozcitak/url",
      "version": "3.0.0",
      "description": "An implementation of the URL Living Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@oozcitak\\/url:\\@oozcitak\\/url:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40oozcitak/url@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/oozcitak/url.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/oozcitak/url",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oozcitak:\\@oozcitak\\/url:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@oozcitak+url@3.0.0/node_modules/@oozcitak/url/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40oozcitak/util@10.0.0?package-id=464fddcdb23f0334",
      "type": "library",
      "author": "Ozgur Ozcitak <oozcitak@gmail.com>",
      "name": "@oozcitak/util",
      "version": "10.0.0",
      "description": "Utility functions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@oozcitak\\/util:\\@oozcitak\\/util:10.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40oozcitak/util@10.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/oozcitak/util.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/oozcitak/util",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oozcitak:\\@oozcitak\\/util:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@oozcitak+util@10.0.0/node_modules/@oozcitak/util/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=bb564c7ea4ee275b",
      "type": "library",
      "name": "@pkgjs/parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "url": "https://github.com/pkgjs/parseargs#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@pkgjs+parseargs@0.11.0/node_modules/@pkgjs/parseargs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=58c79a87039f972e",
      "type": "library",
      "name": "@pkgjs/parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "url": "https://github.com/pkgjs/parseargs#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/@pkgjs/parseargs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=0ae8be433ac6f608",
      "type": "library",
      "name": "@pkgjs/parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "url": "https://github.com/pkgjs/parseargs#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@pkgjs/parseargs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/aspromise@1.1.2?package-id=536dd1389b7639f5",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/aspromise",
      "version": "1.1.2",
      "description": "Returns a promise from a node-style callback function.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/aspromise:\\@protobufjs\\/aspromise:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/aspromise@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/aspromise:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+aspromise@1.1.2/node_modules/@protobufjs/aspromise/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/base64@1.1.2?package-id=d8f0175cac62e7b8",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/base64",
      "version": "1.1.2",
      "description": "A minimal base64 implementation for number arrays.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/base64:\\@protobufjs\\/base64:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/base64@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/base64:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+base64@1.1.2/node_modules/@protobufjs/base64/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/codegen@2.0.5?package-id=21dfc1869832551c",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/codegen",
      "version": "2.0.5",
      "description": "A minimalistic code generation utility.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/codegen:\\@protobufjs\\/codegen:2.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/codegen@2.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/codegen:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+codegen@2.0.5/node_modules/@protobufjs/codegen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/eventemitter@1.1.1?package-id=17b5694030b66663",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/eventemitter",
      "version": "1.1.1",
      "description": "A minimal event emitter.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/eventemitter:\\@protobufjs\\/eventemitter:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/eventemitter@1.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/eventemitter:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+eventemitter@1.1.1/node_modules/@protobufjs/eventemitter/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/fetch@1.1.1?package-id=506baaa35f4d7609",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/fetch",
      "version": "1.1.1",
      "description": "Fetches the contents of a file accross node and browsers.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/fetch:\\@protobufjs\\/fetch:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/fetch@1.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/fetch:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+fetch@1.1.1/node_modules/@protobufjs/fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/float@1.0.2?package-id=4ed12620f8ce6b4d",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/float",
      "version": "1.0.2",
      "description": "Reads / writes floats / doubles from / to buffers in both modern and ancient browsers.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/float:\\@protobufjs\\/float:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/float@1.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/float:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+float@1.0.2/node_modules/@protobufjs/float/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/path@1.1.2?package-id=09fe2dd4eb98743e",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/path",
      "version": "1.1.2",
      "description": "A minimal path module to resolve Unix, Windows and URL paths alike.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/path:\\@protobufjs\\/path:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/path@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/path:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+path@1.1.2/node_modules/@protobufjs/path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/pool@1.1.0?package-id=733eef4da03afbe8",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/pool",
      "version": "1.1.0",
      "description": "A general purpose buffer pool.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/pool:\\@protobufjs\\/pool:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/pool@1.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcodeIO:\\@protobufjs\\/pool:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+pool@1.1.0/node_modules/@protobufjs/pool/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40protobufjs/utf8@1.1.2?package-id=b271f2d474b87a00",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "@protobufjs/utf8",
      "version": "1.1.2",
      "description": "A minimal UTF8 implementation for number arrays.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@protobufjs\\/utf8:\\@protobufjs\\/utf8:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40protobufjs/utf8@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/protobufjs/protobuf.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobufjs:\\@protobufjs\\/utf8:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@protobufjs+utf8@1.1.2/node_modules/@protobufjs/utf8/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/number@1.1.1?package-id=8973d4240bb4827a",
      "type": "library",
      "name": "@radix-ui/number",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/number:\\@radix-ui\\/number:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/number@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/number:\\@radix_ui\\/number:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/number:\\@radix-ui\\/number:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/number:\\@radix_ui\\/number:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/number:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/number:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+number@1.1.1/node_modules/@radix-ui/number/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/primitive@1.1.3?package-id=3d217a1ead6ba872",
      "type": "library",
      "name": "@radix-ui/primitive",
      "version": "1.1.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/primitive:\\@radix-ui\\/primitive:1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/primitive@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/primitive:\\@radix_ui\\/primitive:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/primitive:\\@radix-ui\\/primitive:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/primitive:\\@radix_ui\\/primitive:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/primitive:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/primitive:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+primitive@1.1.3/node_modules/@radix-ui/primitive/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-accordion@1.2.12?package-id=ba659592cc42bffc",
      "type": "library",
      "name": "@radix-ui/react-accordion",
      "version": "1.2.12",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-accordion:\\@radix-ui\\/react-accordion:1.2.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-accordion@1.2.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-accordion:\\@radix_ui\\/react_accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_accordion:\\@radix-ui\\/react-accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_accordion:\\@radix_ui\\/react_accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_accordion:1.2.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-accordion@1.2.12_@types+react-dom@19.2.1_@types+react@19.2.1__@types+re_bcd311bcd1aacba480eaffbb460b6b5c/node_modules/@radix-ui/react-accordion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-alert-dialog@1.1.15?package-id=2ac9ec2d38f49b77",
      "type": "library",
      "name": "@radix-ui/react-alert-dialog",
      "version": "1.1.15",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-alert-dialog:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-alert-dialog@1.1.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-alert-dialog:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_alert_dialog:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_alert_dialog:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-alert:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-alert:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_alert:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_alert:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-alert-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_alert_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-alert-dialog@1.1.15_@types+react-dom@19.2.1_@types+react@19.2.1__@types_995e746b97dbd5ed20f1aca7534dd7b8/node_modules/@radix-ui/react-alert-dialog/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-arrow@1.1.7?package-id=a41bba628bf7e25e",
      "type": "library",
      "name": "@radix-ui/react-arrow",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-arrow:\\@radix-ui\\/react-arrow:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-arrow@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-arrow:\\@radix_ui\\/react_arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_arrow:\\@radix-ui\\/react-arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_arrow:\\@radix_ui\\/react_arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_arrow:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-arrow@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@1_b24b5dbb779f4d668717cf1f7775c03b/node_modules/@radix-ui/react-arrow/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-aspect-ratio@1.1.7?package-id=05630a582f4d09a7",
      "type": "library",
      "name": "@radix-ui/react-aspect-ratio",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-aspect-ratio:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-aspect-ratio@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-aspect-ratio:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_aspect_ratio:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_aspect_ratio:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-aspect:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-aspect:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_aspect:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_aspect:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-aspect-ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_aspect_ratio:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-aspect-ratio@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+_889107077754e5420db74b4041406a69/node_modules/@radix-ui/react-aspect-ratio/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-avatar@1.1.10?package-id=8f30cf7a9f4fe606",
      "type": "library",
      "name": "@radix-ui/react-avatar",
      "version": "1.1.10",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-avatar:\\@radix-ui\\/react-avatar:1.1.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-avatar@1.1.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-avatar:\\@radix_ui\\/react_avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_avatar:\\@radix-ui\\/react-avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_avatar:\\@radix_ui\\/react_avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_avatar:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-avatar@1.1.10_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react_a77ed1c8c3f9ed7cabd9208a1a6c702f/node_modules/@radix-ui/react-avatar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-checkbox@1.3.3?package-id=6f4d66298c9cdee0",
      "type": "library",
      "name": "@radix-ui/react-checkbox",
      "version": "1.3.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-checkbox:\\@radix-ui\\/react-checkbox:1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-checkbox@1.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-checkbox:\\@radix_ui\\/react_checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_checkbox:\\@radix-ui\\/react-checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_checkbox:\\@radix_ui\\/react_checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_checkbox:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-checkbox@1.3.3_@types+react-dom@19.2.1_@types+react@19.2.1__@types+reac_826541f1f9ada4222d2e9e757bcfd299/node_modules/@radix-ui/react-checkbox/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-collapsible@1.1.12?package-id=607749bd5dc05ac5",
      "type": "library",
      "name": "@radix-ui/react-collapsible",
      "version": "1.1.12",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-collapsible:\\@radix-ui\\/react-collapsible:1.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-collapsible@1.1.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-collapsible:\\@radix_ui\\/react_collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_collapsible:\\@radix-ui\\/react-collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_collapsible:\\@radix_ui\\/react_collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_collapsible:1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-collapsible@1.1.12_@types+react-dom@19.2.1_@types+react@19.2.1__@types+_3641be9bd1525eaf3171a59172e23303/node_modules/@radix-ui/react-collapsible/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-collection@1.1.7?package-id=73cbad25a4edeb06",
      "type": "library",
      "name": "@radix-ui/react-collection",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-collection:\\@radix-ui\\/react-collection:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-collection@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-collection:\\@radix_ui\\/react_collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_collection:\\@radix-ui\\/react-collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_collection:\\@radix_ui\\/react_collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_collection:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-collection@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+re_0f8b5ed9961531f87088df3cce770d63/node_modules/@radix-ui/react-collection/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-compose-refs@1.1.2?package-id=5e8d781c2b7428d3",
      "type": "library",
      "name": "@radix-ui/react-compose-refs",
      "version": "1.1.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-compose-refs:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-compose-refs@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-compose-refs:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_compose_refs:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_compose_refs:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-compose:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-compose:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_compose:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_compose:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-compose-refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_compose_refs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-compose-refs@1.1.2_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-compose-refs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-context@1.1.2?package-id=d78845f713bc262b",
      "type": "library",
      "name": "@radix-ui/react-context",
      "version": "1.1.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-context:\\@radix-ui\\/react-context:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-context@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-context:\\@radix_ui\\/react_context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context:\\@radix-ui\\/react-context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context:\\@radix_ui\\/react_context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_context:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-context@1.1.2_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-context/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-context-menu@2.2.16?package-id=f4705e15ecd8c663",
      "type": "library",
      "name": "@radix-ui/react-context-menu",
      "version": "2.2.16",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-context-menu:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-context-menu@2.2.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-context-menu:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context_menu:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context_menu:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-context:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-context:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_context:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-context-menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_context_menu:2.2.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-context-menu@2.2.16_@types+react-dom@19.2.1_@types+react@19.2.1__@types_defb7233715a2807f5570b6b82269f4b/node_modules/@radix-ui/react-context-menu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-dialog@1.1.15?package-id=d9ca0496f203c2bd",
      "type": "library",
      "name": "@radix-ui/react-dialog",
      "version": "1.1.15",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-dialog:\\@radix-ui\\/react-dialog:1.1.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-dialog@1.1.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dialog:\\@radix_ui\\/react_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dialog:\\@radix-ui\\/react-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dialog:\\@radix_ui\\/react_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_dialog:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-dialog@1.1.15_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react_0a626da8ed5038c9c76cae269de88ce2/node_modules/@radix-ui/react-dialog/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-direction@1.1.1?package-id=6a12a388bf81fe5f",
      "type": "library",
      "name": "@radix-ui/react-direction",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-direction:\\@radix-ui\\/react-direction:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-direction@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-direction:\\@radix_ui\\/react_direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_direction:\\@radix-ui\\/react-direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_direction:\\@radix_ui\\/react_direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_direction:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-direction@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-direction/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-dismissable-layer@1.1.11?package-id=ad43c7e685f8494e",
      "type": "library",
      "name": "@radix-ui/react-dismissable-layer",
      "version": "1.1.11",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-dismissable-layer:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-dismissable-layer@1.1.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dismissable-layer:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dismissable_layer:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dismissable_layer:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dismissable:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dismissable:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dismissable:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dismissable:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-dismissable-layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_dismissable_layer:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-dismissable-layer@1.1.11_@types+react-dom@19.2.1_@types+react@19.2.1__@_6938744f5e4e35f3d76d7cb8422ccfb4/node_modules/@radix-ui/react-dismissable-layer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-dropdown-menu@2.1.16?package-id=51faa419a02f4469",
      "type": "library",
      "name": "@radix-ui/react-dropdown-menu",
      "version": "2.1.16",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-dropdown-menu:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-dropdown-menu@2.1.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dropdown-menu:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dropdown_menu:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dropdown_menu:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dropdown:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-dropdown:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dropdown:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_dropdown:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-dropdown-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_dropdown_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-dropdown-menu@2.1.16_@types+react-dom@19.2.1_@types+react@19.2.1__@type_4ef7949fa9db2e659c84c1f5f5ee8c3d/node_modules/@radix-ui/react-dropdown-menu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-focus-guards@1.1.3?package-id=a38cb63a008acd1d",
      "type": "library",
      "name": "@radix-ui/react-focus-guards",
      "version": "1.1.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-focus-guards:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-focus-guards@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus-guards:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus_guards:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus_guards:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-focus-guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_focus_guards:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-focus-guards@1.1.3_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-focus-guards/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-focus-scope@1.1.7?package-id=c17ac93369290cee",
      "type": "library",
      "name": "@radix-ui/react-focus-scope",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-focus-scope:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-focus-scope@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus-scope:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus_scope:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus_scope:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-focus:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_focus:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-focus-scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_focus_scope:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-focus-scope@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+r_2333fdb4f2c057948beb1679adba831f/node_modules/@radix-ui/react-focus-scope/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-hover-card@1.1.15?package-id=0b07142b03546a1b",
      "type": "library",
      "name": "@radix-ui/react-hover-card",
      "version": "1.1.15",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-hover-card:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-hover-card@1.1.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-hover-card:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_hover_card:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_hover_card:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-hover:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-hover:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_hover:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_hover:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-hover-card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_hover_card:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-hover-card@1.1.15_@types+react-dom@19.2.1_@types+react@19.2.1__@types+r_c9656ace47f88ae3f03af071781873a3/node_modules/@radix-ui/react-hover-card/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-id@1.1.1?package-id=d4e8748b7ed85e06",
      "type": "library",
      "name": "@radix-ui/react-id",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-id:\\@radix-ui\\/react-id:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-id@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-id:\\@radix_ui\\/react_id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_id:\\@radix-ui\\/react-id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_id:\\@radix_ui\\/react_id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_id:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-id@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-id/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-label@2.1.7?package-id=0db966a9600e3186",
      "type": "library",
      "name": "@radix-ui/react-label",
      "version": "2.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-label:\\@radix-ui\\/react-label:2.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-label@2.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-label:\\@radix_ui\\/react_label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_label:\\@radix-ui\\/react-label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_label:\\@radix_ui\\/react_label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_label:2.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-label@2.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@1_b637ccd8c59d87a8dea72e736e84d5da/node_modules/@radix-ui/react-label/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-menu@2.1.16?package-id=4d69405712aaf566",
      "type": "library",
      "name": "@radix-ui/react-menu",
      "version": "2.1.16",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-menu:\\@radix-ui\\/react-menu:2.1.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-menu@2.1.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-menu:\\@radix_ui\\/react_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_menu:\\@radix-ui\\/react-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_menu:\\@radix_ui\\/react_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_menu:2.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-menu@2.1.16_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@1_2ba7174bc5d69bf61d11c961d9754d4b/node_modules/@radix-ui/react-menu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-menubar@1.1.16?package-id=5aabbabd5f1847e9",
      "type": "library",
      "name": "@radix-ui/react-menubar",
      "version": "1.1.16",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-menubar:\\@radix-ui\\/react-menubar:1.1.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-menubar@1.1.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-menubar:\\@radix_ui\\/react_menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_menubar:\\@radix-ui\\/react-menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_menubar:\\@radix_ui\\/react_menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_menubar:1.1.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-menubar@1.1.16_@types+react-dom@19.2.1_@types+react@19.2.1__@types+reac_4f0bd9eb024dd1db19b95637cd9ba06d/node_modules/@radix-ui/react-menubar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-navigation-menu@1.2.14?package-id=9a780c24997399f3",
      "type": "library",
      "name": "@radix-ui/react-navigation-menu",
      "version": "1.2.14",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-navigation-menu:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-navigation-menu@1.2.14",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-navigation-menu:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_navigation_menu:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_navigation_menu:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-navigation:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-navigation:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_navigation:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_navigation:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-navigation-menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_navigation_menu:1.2.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-navigation-menu@1.2.14_@types+react-dom@19.2.1_@types+react@19.2.1__@ty_46654507d766035464ad3d31159fe1c3/node_modules/@radix-ui/react-navigation-menu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-popover@1.1.15?package-id=b06286867c0c05ae",
      "type": "library",
      "name": "@radix-ui/react-popover",
      "version": "1.1.15",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-popover:\\@radix-ui\\/react-popover:1.1.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-popover@1.1.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-popover:\\@radix_ui\\/react_popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_popover:\\@radix-ui\\/react-popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_popover:\\@radix_ui\\/react_popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_popover:1.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-popover@1.1.15_@types+react-dom@19.2.1_@types+react@19.2.1__@types+reac_db6ad3fcdee80f83aa08a80ffcb18f99/node_modules/@radix-ui/react-popover/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-popper@1.2.8?package-id=61c4e55abf034d60",
      "type": "library",
      "name": "@radix-ui/react-popper",
      "version": "1.2.8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-popper:\\@radix-ui\\/react-popper:1.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-popper@1.2.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-popper:\\@radix_ui\\/react_popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_popper:\\@radix-ui\\/react-popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_popper:\\@radix_ui\\/react_popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_popper:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-popper@1.2.8_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@_5e23a2e04f687b9473cf38c895236d04/node_modules/@radix-ui/react-popper/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-portal@1.1.9?package-id=e0a76229f5cd3751",
      "type": "library",
      "name": "@radix-ui/react-portal",
      "version": "1.1.9",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-portal:\\@radix-ui\\/react-portal:1.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-portal@1.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-portal:\\@radix_ui\\/react_portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_portal:\\@radix-ui\\/react-portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_portal:\\@radix_ui\\/react_portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_portal:1.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-portal@1.1.9_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@_5b1abae55dcad04a03fcde0542accb41/node_modules/@radix-ui/react-portal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-presence@1.1.5?package-id=42e93a6282b3fd49",
      "type": "library",
      "name": "@radix-ui/react-presence",
      "version": "1.1.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-presence:\\@radix-ui\\/react-presence:1.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-presence@1.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-presence:\\@radix_ui\\/react_presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_presence:\\@radix-ui\\/react-presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_presence:\\@radix_ui\\/react_presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_presence:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-presence@1.1.5_@types+react-dom@19.2.1_@types+react@19.2.1__@types+reac_fa36b7159a01b20626e7797896134587/node_modules/@radix-ui/react-presence/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-primitive@2.1.3?package-id=8fe4a8165221d0d6",
      "type": "library",
      "name": "@radix-ui/react-primitive",
      "version": "2.1.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-primitive:\\@radix-ui\\/react-primitive:2.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-primitive@2.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-primitive:\\@radix_ui\\/react_primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_primitive:\\@radix-ui\\/react-primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_primitive:\\@radix_ui\\/react_primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_primitive:2.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-primitive@2.1.3_@types+react-dom@19.2.1_@types+react@19.2.1__@types+rea_e3df678b4bfbefc5aee41d192f5f7c26/node_modules/@radix-ui/react-primitive/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-progress@1.1.7?package-id=879d093238d8bcce",
      "type": "library",
      "name": "@radix-ui/react-progress",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-progress:\\@radix-ui\\/react-progress:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-progress@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-progress:\\@radix_ui\\/react_progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_progress:\\@radix-ui\\/react-progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_progress:\\@radix_ui\\/react_progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_progress:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-progress@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+reac_bc29bb5b5003accfe323af07d2beebe9/node_modules/@radix-ui/react-progress/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-radio-group@1.3.8?package-id=63c78086dfa79941",
      "type": "library",
      "name": "@radix-ui/react-radio-group",
      "version": "1.3.8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-radio-group:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-radio-group@1.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-radio-group:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_radio_group:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_radio_group:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-radio:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-radio:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_radio:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_radio:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-radio-group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_radio_group:1.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-radio-group@1.3.8_@types+react-dom@19.2.1_@types+react@19.2.1__@types+r_424aeb040eff2cfca25eea205448a006/node_modules/@radix-ui/react-radio-group/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-roving-focus@1.1.11?package-id=b93e99ec9eb4a9f3",
      "type": "library",
      "name": "@radix-ui/react-roving-focus",
      "version": "1.1.11",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-roving-focus:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-roving-focus@1.1.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-roving-focus:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_roving_focus:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_roving_focus:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-roving:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-roving:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_roving:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_roving:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-roving-focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_roving_focus:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-roving-focus@1.1.11_@types+react-dom@19.2.1_@types+react@19.2.1__@types_54ec0a04d05e36323060ef125b82d435/node_modules/@radix-ui/react-roving-focus/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-scroll-area@1.2.10?package-id=601dfcccc7e0c290",
      "type": "library",
      "name": "@radix-ui/react-scroll-area",
      "version": "1.2.10",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-scroll-area:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-scroll-area@1.2.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-scroll-area:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_scroll_area:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_scroll_area:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-scroll:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-scroll:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_scroll:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_scroll:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-scroll-area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_scroll_area:1.2.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-scroll-area@1.2.10_@types+react-dom@19.2.1_@types+react@19.2.1__@types+_0e43d9a71c378f341fdf64a426dbb9fd/node_modules/@radix-ui/react-scroll-area/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-select@2.2.6?package-id=1d02378e51a99810",
      "type": "library",
      "name": "@radix-ui/react-select",
      "version": "2.2.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-select:\\@radix-ui\\/react-select:2.2.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-select@2.2.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-select:\\@radix_ui\\/react_select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_select:\\@radix-ui\\/react-select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_select:\\@radix_ui\\/react_select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_select:2.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-select@2.2.6_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@_8b13ce225722f578eb46e40f80ca06e5/node_modules/@radix-ui/react-select/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-separator@1.1.7?package-id=ed8d27e023a2caee",
      "type": "library",
      "name": "@radix-ui/react-separator",
      "version": "1.1.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-separator:\\@radix-ui\\/react-separator:1.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-separator@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-separator:\\@radix_ui\\/react_separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_separator:\\@radix-ui\\/react-separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_separator:\\@radix_ui\\/react_separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_separator:1.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-separator@1.1.7_@types+react-dom@19.2.1_@types+react@19.2.1__@types+rea_3079ac3cc9b82322e83e0fbe11770dee/node_modules/@radix-ui/react-separator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-slider@1.3.6?package-id=33e099df749143f3",
      "type": "library",
      "name": "@radix-ui/react-slider",
      "version": "1.3.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-slider:\\@radix-ui\\/react-slider:1.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-slider@1.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-slider:\\@radix_ui\\/react_slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_slider:\\@radix-ui\\/react-slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_slider:\\@radix_ui\\/react_slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_slider:1.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-slider@1.3.6_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@_f400e87c32113f99205db34ab44ee3da/node_modules/@radix-ui/react-slider/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-slot@1.2.3?package-id=762a6c51d67e667b",
      "type": "library",
      "name": "@radix-ui/react-slot",
      "version": "1.2.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-slot:\\@radix-ui\\/react-slot:1.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-slot@1.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-slot:\\@radix_ui\\/react_slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_slot:\\@radix-ui\\/react-slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_slot:\\@radix_ui\\/react_slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_slot:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-slot@1.2.3_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-slot/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-switch@1.2.6?package-id=3095dafbfab68d45",
      "type": "library",
      "name": "@radix-ui/react-switch",
      "version": "1.2.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-switch:\\@radix-ui\\/react-switch:1.2.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-switch@1.2.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-switch:\\@radix_ui\\/react_switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_switch:\\@radix-ui\\/react-switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_switch:\\@radix_ui\\/react_switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_switch:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-switch@1.2.6_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@_37cd853345dc388359806df09de77125/node_modules/@radix-ui/react-switch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-tabs@1.1.13?package-id=0aa26997ebf509b8",
      "type": "library",
      "name": "@radix-ui/react-tabs",
      "version": "1.1.13",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-tabs:\\@radix-ui\\/react-tabs:1.1.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-tabs@1.1.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-tabs:\\@radix_ui\\/react_tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_tabs:\\@radix-ui\\/react-tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_tabs:\\@radix_ui\\/react_tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_tabs:1.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-tabs@1.1.13_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@1_f17d79e5624870ad9beff8f466832fc4/node_modules/@radix-ui/react-tabs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-toggle@1.1.10?package-id=f0293a5e38040c1e",
      "type": "library",
      "name": "@radix-ui/react-toggle",
      "version": "1.1.10",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-toggle:\\@radix-ui\\/react-toggle:1.1.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-toggle@1.1.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-toggle:\\@radix_ui\\/react_toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle:\\@radix-ui\\/react-toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle:\\@radix_ui\\/react_toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_toggle:1.1.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-toggle@1.1.10_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react_8136373cc468f2bb18165ffa98ae6145/node_modules/@radix-ui/react-toggle/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-toggle-group@1.1.11?package-id=a2a3932c39b64296",
      "type": "library",
      "name": "@radix-ui/react-toggle-group",
      "version": "1.1.11",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-toggle-group:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-toggle-group@1.1.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-toggle-group:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle_group:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle_group:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-toggle:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-toggle:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_toggle:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-toggle-group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_toggle_group:1.1.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-toggle-group@1.1.11_@types+react-dom@19.2.1_@types+react@19.2.1__@types_f1e6afa4ed80e845e386c6430fd8b0a1/node_modules/@radix-ui/react-toggle-group/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-tooltip@1.2.8?package-id=adfd448ef2287314",
      "type": "library",
      "name": "@radix-ui/react-tooltip",
      "version": "1.2.8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-tooltip:\\@radix-ui\\/react-tooltip:1.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-tooltip@1.2.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-tooltip:\\@radix_ui\\/react_tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_tooltip:\\@radix-ui\\/react-tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_tooltip:\\@radix_ui\\/react_tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_tooltip:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-tooltip@1.2.8_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react_cf38e8bef4fd3f50a3a3839d1868f5b4/node_modules/@radix-ui/react-tooltip/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-callback-ref@1.1.1?package-id=107a215f8f40baf6",
      "type": "library",
      "name": "@radix-ui/react-use-callback-ref",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-callback-ref:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-callback-ref@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-callback-ref:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_callback_ref:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_callback_ref:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-callback:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-callback:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_callback:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_callback:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-callback-ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_callback_ref:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-callback-ref@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-callback-ref/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-controllable-state@1.2.2?package-id=f2245386b3845387",
      "type": "library",
      "name": "@radix-ui/react-use-controllable-state",
      "version": "1.2.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-controllable-state:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-controllable-state@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-controllable-state:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_controllable_state:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_controllable_state:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-controllable:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-controllable:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_controllable:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_controllable:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-controllable-state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_controllable_state:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-controllable-state@1.2.2_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-controllable-state/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-effect-event@0.0.2?package-id=7e57af761af98a39",
      "type": "library",
      "name": "@radix-ui/react-use-effect-event",
      "version": "0.0.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-effect-event:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-effect-event@0.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-effect-event:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_effect_event:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_effect_event:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-effect:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-effect:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_effect:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_effect:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-effect-event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_effect_event:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-effect-event@0.0.2_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-effect-event/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-escape-keydown@1.1.1?package-id=950c6e3d332cf90a",
      "type": "library",
      "name": "@radix-ui/react-use-escape-keydown",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-escape-keydown:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-escape-keydown@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-escape-keydown:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_escape_keydown:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_escape_keydown:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-escape:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-escape:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_escape:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_escape:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-escape-keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_escape_keydown:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-escape-keydown@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-escape-keydown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-is-hydrated@0.1.0?package-id=bf7549040ace72f2",
      "type": "library",
      "name": "@radix-ui/react-use-is-hydrated",
      "version": "0.1.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-is-hydrated:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-is-hydrated@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-is-hydrated:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_is_hydrated:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_is_hydrated:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-is:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-is:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_is:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_is:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-is-hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_is_hydrated:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-is-hydrated@0.1.0_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-is-hydrated/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-layout-effect@1.1.1?package-id=c4fc765e6da5f6c2",
      "type": "library",
      "name": "@radix-ui/react-use-layout-effect",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-layout-effect:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-layout-effect@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-layout-effect:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_layout_effect:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_layout_effect:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-layout:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-layout:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_layout:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_layout:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-layout-effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_layout_effect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-layout-effect@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-layout-effect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-previous@1.1.1?package-id=28dbedba09b2bdc9",
      "type": "library",
      "name": "@radix-ui/react-use-previous",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-previous:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-previous@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-previous:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_previous:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_previous:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_previous:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-previous@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-previous/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-rect@1.1.1?package-id=abc631a2a6a3f80d",
      "type": "library",
      "name": "@radix-ui/react-use-rect",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-rect:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-rect@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-rect:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_rect:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_rect:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-rect@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-rect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-use-size@1.1.1?package-id=5577781ef2d0a0b0",
      "type": "library",
      "name": "@radix-ui/react-use-size",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-use-size:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-use-size@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use-size:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_size:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use_size:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-use:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_use:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-use-size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_use_size:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-use-size@1.1.1_@types+react@19.2.1_react@19.2.1/node_modules/@radix-ui/react-use-size/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/react-visually-hidden@1.2.3?package-id=1bd5bb92f8e06f6d",
      "type": "library",
      "name": "@radix-ui/react-visually-hidden",
      "version": "1.2.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/react-visually-hidden:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/react-visually-hidden@1.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-visually-hidden:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_visually_hidden:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_visually_hidden:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-visually:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react-visually:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_visually:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react_visually:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/react:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/react:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/react-visually-hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/react_visually_hidden:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+react-visually-hidden@1.2.3_@types+react-dom@19.2.1_@types+react@19.2.1__@typ_446f2dde805ead628b29c933c2a72923/node_modules/@radix-ui/react-visually-hidden/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40radix-ui/rect@1.1.1?package-id=bed1fa74243e4d47",
      "type": "library",
      "name": "@radix-ui/rect",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@radix-ui\\/rect:\\@radix-ui\\/rect:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40radix-ui/rect@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/radix-ui/primitives.git",
          "type": "distribution"
        },
        {
          "url": "https://radix-ui.com/primitives",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix-ui\\/rect:\\@radix_ui\\/rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/rect:\\@radix-ui\\/rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix_ui\\/rect:\\@radix_ui\\/rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix-ui\\/rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@radix:\\@radix_ui\\/rect:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@radix-ui+rect@1.1.1/node_modules/@radix-ui/rect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40rolldown/pluginutils@1.0.0-beta.38?package-id=948797cbbb65650e",
      "type": "library",
      "name": "@rolldown/pluginutils",
      "version": "1.0.0-beta.38",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@rolldown\\/pluginutils:\\@rolldown\\/pluginutils:1.0.0-beta.38:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40rolldown/pluginutils@1.0.0-beta.38",
      "externalReferences": [
        {
          "url": "git+https://github.com/rolldown/rolldown.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@rolldown+pluginutils@1.0.0-beta.38/node_modules/@rolldown/pluginutils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.52.4?package-id=582b45a3ef1d27dd",
      "type": "library",
      "author": "Lukas Taegert-Atkinson",
      "name": "@rollup/rollup-linux-x64-gnu",
      "version": "4.52.4",
      "description": "Native bindings for Rollup",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64-gnu:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.52.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/rollup/rollup.git",
          "type": "distribution"
        },
        {
          "url": "https://rollupjs.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64-gnu:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64_gnu:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64_gnu:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup:\\@rollup\\/rollup-linux-x64-gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup:\\@rollup\\/rollup_linux_x64_gnu:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@rollup+rollup-linux-x64-gnu@4.52.4/node_modules/@rollup/rollup-linux-x64-gnu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.52.4?package-id=080d92bc65f05fae",
      "type": "library",
      "author": "Lukas Taegert-Atkinson",
      "name": "@rollup/rollup-linux-x64-musl",
      "version": "4.52.4",
      "description": "Native bindings for Rollup",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64-musl:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.52.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/rollup/rollup.git",
          "type": "distribution"
        },
        {
          "url": "https://rollupjs.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64-musl:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64_musl:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64_musl:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux-x64:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux_x64:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup-linux:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup_linux:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup:\\@rollup\\/rollup-linux-x64-musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@rollup\\/rollup:\\@rollup\\/rollup_linux_x64_musl:4.52.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@rollup+rollup-linux-x64-musl@4.52.4/node_modules/@rollup/rollup-linux-x64-musl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/core@3.14.0?package-id=ecfb127e66a5213d",
      "type": "library",
      "author": "Pine Wu <octref@gmail.com>; Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/core",
      "version": "3.14.0",
      "description": "Core of Shiki",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/core:\\@shikijs\\/core:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/core@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/core:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+core@3.14.0/node_modules/@shikijs/core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/engine-javascript@3.14.0?package-id=44ff42bf6f9e6681",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/engine-javascript",
      "version": "3.14.0",
      "description": "Engine for Shiki using JavaScript's native RegExp",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/engine-javascript:\\@shikijs\\/engine-javascript:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/engine-javascript@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine-javascript:\\@shikijs\\/engine_javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine_javascript:\\@shikijs\\/engine-javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine_javascript:\\@shikijs\\/engine_javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine:\\@shikijs\\/engine-javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine:\\@shikijs\\/engine_javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/engine-javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/engine_javascript:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+engine-javascript@3.14.0/node_modules/@shikijs/engine-javascript/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/engine-oniguruma@3.14.0?package-id=3af74116001ad5da",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/engine-oniguruma",
      "version": "3.14.0",
      "description": "Engine for Shiki using Oniguruma RegExp engine in WebAssembly",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/engine-oniguruma:\\@shikijs\\/engine-oniguruma:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/engine-oniguruma@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine-oniguruma:\\@shikijs\\/engine_oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine_oniguruma:\\@shikijs\\/engine-oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine_oniguruma:\\@shikijs\\/engine_oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine:\\@shikijs\\/engine-oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/engine:\\@shikijs\\/engine_oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/engine-oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/engine_oniguruma:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+engine-oniguruma@3.14.0/node_modules/@shikijs/engine-oniguruma/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/langs@3.14.0?package-id=6580b67656326906",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/langs",
      "version": "3.14.0",
      "description": "TextMate grammars for Shiki in ESM",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/langs:\\@shikijs\\/langs:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/langs@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/langs:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+langs@3.14.0/node_modules/@shikijs/langs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/themes@3.14.0?package-id=87081b0a080ebc3f",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/themes",
      "version": "3.14.0",
      "description": "TextMate themes for Shiki in ESM",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/themes:\\@shikijs\\/themes:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/themes@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/themes:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+themes@3.14.0/node_modules/@shikijs/themes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/types@3.14.0?package-id=65ab6272107870eb",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "@shikijs/types",
      "version": "3.14.0",
      "description": "Type definitions for Shiki",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/types:\\@shikijs\\/types:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/types@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/types:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+types@3.14.0/node_modules/@shikijs/types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40shikijs/vscode-textmate@10.0.2?package-id=dc7c5444a7b98383",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "@shikijs/vscode-textmate",
      "version": "10.0.2",
      "description": "Shiki's fork of `vscode-textmate`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@shikijs\\/vscode-textmate:\\@shikijs\\/vscode-textmate:10.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40shikijs/vscode-textmate@10.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/shikijs/vscode-textmate",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/vscode-textmate:\\@shikijs\\/vscode_textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/vscode_textmate:\\@shikijs\\/vscode-textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/vscode_textmate:\\@shikijs\\/vscode_textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/vscode:\\@shikijs\\/vscode-textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@shikijs\\/vscode:\\@shikijs\\/vscode_textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/vscode-textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shikijs:\\@shikijs\\/vscode_textmate:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@shikijs+vscode-textmate@10.0.2/node_modules/@shikijs/vscode-textmate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/bundle@3.1.0?package-id=ee4a60ded4507a03",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/bundle",
      "version": "3.1.0",
      "description": "Sigstore bundle type",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/bundle:\\@sigstore\\/bundle:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/bundle@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/bundle:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/core@2.0.0?package-id=5d7e6a89df96b900",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/core",
      "version": "2.0.0",
      "description": "Base library for Sigstore",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/core:\\@sigstore\\/core:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/core@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/core#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/core:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/protobuf-specs@0.4.3?package-id=43d949b446c06295",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/protobuf-specs",
      "version": "0.4.3",
      "description": "code-signing for npm packages",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/protobuf-specs:\\@sigstore\\/protobuf-specs:0.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/protobuf-specs@0.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/protobuf-specs.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/protobuf-specs#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf-specs:\\@sigstore\\/protobuf_specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf_specs:\\@sigstore\\/protobuf-specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf_specs:\\@sigstore\\/protobuf_specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf:\\@sigstore\\/protobuf-specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@sigstore\\/protobuf:\\@sigstore\\/protobuf_specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/protobuf-specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/protobuf_specs:0.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/sign@3.1.0?package-id=79cb4d1bd2594417",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/sign",
      "version": "3.1.0",
      "description": "Sigstore signing library",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/sign:\\@sigstore\\/sign:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/sign@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/sign#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/sign:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/sign/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/tuf@3.1.1?package-id=05c3c579b3a4a824",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/tuf",
      "version": "3.1.1",
      "description": "Client for the Sigstore TUF repository",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/tuf:\\@sigstore\\/tuf:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/tuf@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/tuf:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40sigstore/verify@2.1.1?package-id=582d28a349c6daeb",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@sigstore/verify",
      "version": "2.1.1",
      "description": "Verification of Sigstore signatures",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@sigstore\\/verify:\\@sigstore\\/verify:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40sigstore/verify@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/verify#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:\\@sigstore\\/verify:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@sigstore/verify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/buffer-layout@4.0.1?package-id=24100abcb898f343",
      "type": "library",
      "author": "Peter A. Bigot <pab@pabigot.com>",
      "name": "@solana/buffer-layout",
      "version": "4.0.1",
      "description": "Translation between JavaScript values and Buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer-layout:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/buffer-layout@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/buffer-layout.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/solana-labs/buffer-layout",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer_layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer-layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer_layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer-layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer_layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer-layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer_layout:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+buffer-layout@4.0.1/node_modules/@solana/buffer-layout/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/buffer-layout-utils@0.3.0?package-id=0ae5fda310326470",
      "type": "library",
      "author": "Solana Maintainers <maintainers@solana.foundation>",
      "name": "@solana/buffer-layout-utils",
      "version": "0.3.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/buffer-layout-utils:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/buffer-layout-utils@0.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/buffer-layout-utils",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout-utils:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout_utils:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout_utils:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+buffer-layout-utils@0.3.0_bufferutil@4.1.0_encoding@0.1.13_typescript@5.6.3_utf-8-validate@6.0.6/node_modules/@solana/buffer-layout-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/buffer-layout-utils@0.3.0?package-id=e1fc566a594ff9fd",
      "type": "library",
      "author": "Solana Maintainers <maintainers@solana.foundation>",
      "name": "@solana/buffer-layout-utils",
      "version": "0.3.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/buffer-layout-utils:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/buffer-layout-utils@0.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/buffer-layout-utils",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout-utils:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout_utils:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout_utils:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer-layout:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer_layout:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/buffer:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer-layout-utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/buffer_layout_utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+buffer-layout-utils@0.3.0_bufferutil@4.1.0_typescript@5.6.3_utf-8-validate@6.0.6/node_modules/@solana/buffer-layout-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs@2.0.0-rc.1?package-id=427e37e509b4fd07",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs",
      "version": "2.0.0-rc.1",
      "description": "A library for encoding and decoding any data structure",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs@2.0.0-rc.1_fastestsmallesttextencoderdecoder@1.0.22_typescript@5.6.3/node_modules/@solana/codecs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-core@2.0.0-rc.1?package-id=a80b627cce822ff5",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-core",
      "version": "2.0.0-rc.1",
      "description": "Core types and helpers for encoding and decoding byte arrays on Solana",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-core:\\@solana\\/codecs-core:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-core@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-core:\\@solana\\/codecs_core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_core:\\@solana\\/codecs-core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_core:\\@solana\\/codecs_core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs-core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs_core:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-core@2.0.0-rc.1_typescript@5.6.3/node_modules/@solana/codecs-core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-core@2.3.0?package-id=4af2fd8019ed692b",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-core",
      "version": "2.3.0",
      "description": "Core types and helpers for encoding and decoding byte arrays on Solana",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-core:\\@solana\\/codecs-core:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-core@2.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/anza-xyz/kit",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-core:\\@solana\\/codecs_core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_core:\\@solana\\/codecs-core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_core:\\@solana\\/codecs_core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anza-xyz:\\@solana\\/codecs-core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anza-xyz:\\@solana\\/codecs_core:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-core@2.3.0_typescript@5.6.3/node_modules/@solana/codecs-core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-data-structures@2.0.0-rc.1?package-id=9745796a5ae93b27",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-data-structures",
      "version": "2.0.0-rc.1",
      "description": "Codecs for various data structures",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-data-structures:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-data-structures@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-data-structures:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_data_structures:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_data_structures:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-data:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-data:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_data:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_data:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs-data-structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs_data_structures:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-data-structures@2.0.0-rc.1_typescript@5.6.3/node_modules/@solana/codecs-data-structures/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-numbers@2.0.0-rc.1?package-id=0a0a3b0d7edf4169",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-numbers",
      "version": "2.0.0-rc.1",
      "description": "Codecs for numbers of different sizes and endianness",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-numbers:\\@solana\\/codecs-numbers:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-numbers@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-numbers:\\@solana\\/codecs_numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_numbers:\\@solana\\/codecs-numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_numbers:\\@solana\\/codecs_numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs-numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs_numbers:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-numbers@2.0.0-rc.1_typescript@5.6.3/node_modules/@solana/codecs-numbers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-numbers@2.3.0?package-id=4eef951a46bb330f",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-numbers",
      "version": "2.3.0",
      "description": "Codecs for numbers of different sizes and endianness",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-numbers:\\@solana\\/codecs-numbers:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-numbers@2.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/anza-xyz/kit",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-numbers:\\@solana\\/codecs_numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_numbers:\\@solana\\/codecs-numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_numbers:\\@solana\\/codecs_numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anza-xyz:\\@solana\\/codecs-numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anza-xyz:\\@solana\\/codecs_numbers:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-numbers@2.3.0_typescript@5.6.3/node_modules/@solana/codecs-numbers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/codecs-strings@2.0.0-rc.1?package-id=6ad5bf36ca358b18",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/codecs-strings",
      "version": "2.0.0-rc.1",
      "description": "Codecs for strings of different sizes and encodings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/codecs-strings:\\@solana\\/codecs-strings:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/codecs-strings@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs-strings:\\@solana\\/codecs_strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_strings:\\@solana\\/codecs-strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs_strings:\\@solana\\/codecs_strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs-strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/codecs:\\@solana\\/codecs_strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs-strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/codecs_strings:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+codecs-strings@2.0.0-rc.1_fastestsmallesttextencoderdecoder@1.0.22_typescript@5.6.3/node_modules/@solana/codecs-strings/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/errors@2.0.0-rc.1?package-id=6dc80cd448ddc000",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/errors",
      "version": "2.0.0-rc.1",
      "description": "Throw, identify, and decode Solana JavaScript errors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/errors:\\@solana\\/errors:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/errors@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/errors:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+errors@2.0.0-rc.1_typescript@5.6.3/node_modules/@solana/errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/errors@2.3.0?package-id=6728e3922fce8d9f",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/errors",
      "version": "2.3.0",
      "description": "Throw, identify, and decode Solana JavaScript errors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/errors:\\@solana\\/errors:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/errors@2.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/anza-xyz/kit",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anza-xyz:\\@solana\\/errors:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+errors@2.3.0_typescript@5.6.3/node_modules/@solana/errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/options@2.0.0-rc.1?package-id=2a3f6dfe632f45d7",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/options",
      "version": "2.0.0-rc.1",
      "description": "Managing and serializing Rust-like Option types in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/options:\\@solana\\/options:2.0.0-rc.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/options@2.0.0-rc.1",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-web3.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/options:2.0.0-rc.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+options@2.0.0-rc.1_fastestsmallesttextencoderdecoder@1.0.22_typescript@5.6.3/node_modules/@solana/options/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token@0.4.15?package-id=b1a559078f93f7d6",
      "type": "library",
      "name": "@solana/spl-token",
      "version": "0.4.15",
      "description": "SPL Token Program JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token@0.4.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/solana-program/token-2022.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/solana-program/token-2022#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-program:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-program:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token@0.4.15_@solana+web3.js@1.98.4_bufferutil@4.1.0_encoding@0.1.13_typesc_fa5bfccd717eff5ca57846fd6a01c5c5/node_modules/@solana/spl-token/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token@0.4.15?package-id=8e99729043129621",
      "type": "library",
      "name": "@solana/spl-token",
      "version": "0.4.15",
      "description": "SPL Token Program JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token@0.4.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/solana-program/token-2022.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/solana-program/token-2022#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-program:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-program:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token:0.4.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token@0.4.15_@solana+web3.js@1.98.4_bufferutil@4.1.0_typescript@5.6.3_utf-8_4081ced1e6c7b99a80ddbf4e82529df2/node_modules/@solana/spl-token/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token-group@0.0.7?package-id=ba499b0765dccfc9",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/spl-token-group",
      "version": "0.0.7",
      "description": "SPL Token Group Interface JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token-group:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token-group@0.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-program-library",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token-group:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_group:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_group:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token-group@0.0.7_@solana+web3.js@1.98.4_bufferutil@4.1.0_encoding@0.1.13_t_13c18744772001ebd2aac19eebd6a2e2/node_modules/@solana/spl-token-group/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token-group@0.0.7?package-id=a7dd903422e4882b",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/spl-token-group",
      "version": "0.0.7",
      "description": "SPL Token Group Interface JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token-group:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token-group@0.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-program-library",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token-group:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_group:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_group:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl-token-group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl_token_group:0.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token-group@0.0.7_@solana+web3.js@1.98.4_bufferutil@4.1.0_typescript@5.6.3__fd04ce2514dd6c009e88ab8cc9a2ca87/node_modules/@solana/spl-token-group/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token-metadata@0.1.6?package-id=2ed071f2c56e2e7a",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/spl-token-metadata",
      "version": "0.1.6",
      "description": "SPL Token Metadata Interface JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token-metadata:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token-metadata@0.1.6",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-program-library",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token-metadata:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_metadata:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_metadata:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token-metadata@0.1.6_@solana+web3.js@1.98.4_bufferutil@4.1.0_encoding@0.1.1_e1e8fed7f2dc4f12e82b5c106393bcf5/node_modules/@solana/spl-token-metadata/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/spl-token-metadata@0.1.6?package-id=4bfba03560121a08",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/spl-token-metadata",
      "version": "0.1.6",
      "description": "SPL Token Metadata Interface JS API",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@solana\\/spl-token-metadata:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/spl-token-metadata@0.1.6",
      "externalReferences": [
        {
          "url": "https://github.com/solana-labs/solana-program-library",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token-metadata:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_metadata:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token_metadata:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl-token:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl_token:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/spl:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl-token-metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:solana-labs:\\@solana\\/spl_token_metadata:0.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+spl-token-metadata@0.1.6_@solana+web3.js@1.98.4_bufferutil@4.1.0_typescript@5.6_8367660cacd98be2d2d66e862ad949a4/node_modules/@solana/spl-token-metadata/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/web3.js@1.98.4?package-id=3f0b7564d348b456",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/web3.js",
      "version": "1.98.4",
      "description": "Solana Javascript API",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:solana-foundation:\\@solana\\/web3.js:1.98.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/web3.js@1.98.4",
      "externalReferences": [
        {
          "url": "https://github.com/solana-foundation/solana-web3.js.git",
          "type": "distribution"
        },
        {
          "url": "https://solana.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/web3.js:\\@solana\\/web3.js:1.98.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+web3.js@1.98.4_bufferutil@4.1.0_encoding@0.1.13_typescript@5.6.3_utf-8-validate@6.0.6/node_modules/@solana/web3.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40solana/web3.js@1.98.4?package-id=dcd565da8eb2f29a",
      "type": "library",
      "author": "Solana Labs Maintainers <maintainers@solanalabs.com>",
      "name": "@solana/web3.js",
      "version": "1.98.4",
      "description": "Solana Javascript API",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:solana-foundation:\\@solana\\/web3.js:1.98.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40solana/web3.js@1.98.4",
      "externalReferences": [
        {
          "url": "https://github.com/solana-foundation/solana-web3.js.git",
          "type": "distribution"
        },
        {
          "url": "https://solana.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@solana\\/web3.js:\\@solana\\/web3.js:1.98.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@solana+web3.js@1.98.4_bufferutil@4.1.0_typescript@5.6.3_utf-8-validate@6.0.6/node_modules/@solana/web3.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40standard-schema/utils@0.3.0?package-id=cc257b57a7814d44",
      "type": "library",
      "author": "Fabian Hiller",
      "name": "@standard-schema/utils",
      "version": "0.3.0",
      "description": "The official runtime utils for Standard Schema",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@standard-schema\\/utils:\\@standard-schema\\/utils:0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40standard-schema/utils@0.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/standard-schema/standard-schema",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@standard-schema\\/utils:\\@standard_schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@standard_schema\\/utils:\\@standard-schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@standard_schema\\/utils:\\@standard_schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:standard-schema:\\@standard-schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:standard-schema:\\@standard_schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@standard:\\@standard-schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@standard:\\@standard_schema\\/utils:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@standard-schema+utils@0.3.0/node_modules/@standard-schema/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40swc/helpers@0.5.23?package-id=ab01999652c5c168",
      "type": "library",
      "author": "강동윤 <kdy1997.dev@gmail.com>",
      "name": "@swc/helpers",
      "version": "0.5.23",
      "description": "External helpers for the swc project.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.5.23:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40swc/helpers@0.5.23",
      "externalReferences": [
        {
          "url": "git+https://github.com/swc-project/swc.git",
          "type": "distribution"
        },
        {
          "url": "https://swc.rs",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@swc+helpers@0.5.23/node_modules/@swc/helpers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/node@4.1.14?package-id=ae7d562fa6b2005b",
      "type": "library",
      "name": "@tailwindcss/node",
      "version": "4.1.14",
      "description": "A utility-first CSS framework for rapidly building custom user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/node:\\@tailwindcss\\/node:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/node@4.1.14",
      "externalReferences": [
        {
          "url": "https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        },
        {
          "url": "https://tailwindcss.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindlabs:\\@tailwindcss\\/node:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+node@4.1.14/node_modules/@tailwindcss/node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/oxide@4.1.14?package-id=4d3e21131c94f630",
      "type": "library",
      "name": "@tailwindcss/oxide",
      "version": "4.1.14",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/oxide:\\@tailwindcss\\/oxide:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/oxide@4.1.14",
      "externalReferences": [
        {
          "url": "git+https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+oxide@4.1.14/node_modules/@tailwindcss/oxide/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/oxide-linux-x64-gnu@4.1.14?package-id=21349f6c7ac42f70",
      "type": "library",
      "name": "@tailwindcss/oxide-linux-x64-gnu",
      "version": "4.1.14",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64-gnu:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-gnu@4.1.14",
      "externalReferences": [
        {
          "url": "git+https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64-gnu:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64_gnu:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64_gnu:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide:\\@tailwindcss\\/oxide-linux-x64-gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide:\\@tailwindcss\\/oxide_linux_x64_gnu:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+oxide-linux-x64-gnu@4.1.14/node_modules/@tailwindcss/oxide-linux-x64-gnu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/oxide-linux-x64-musl@4.1.14?package-id=7cdcddbd84680240",
      "type": "library",
      "name": "@tailwindcss/oxide-linux-x64-musl",
      "version": "4.1.14",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64-musl:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-musl@4.1.14",
      "externalReferences": [
        {
          "url": "git+https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64-musl:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64_musl:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64_musl:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux-x64:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux_x64:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide-linux:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide_linux:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide:\\@tailwindcss\\/oxide-linux-x64-musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tailwindcss\\/oxide:\\@tailwindcss\\/oxide_linux_x64_musl:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+oxide-linux-x64-musl@4.1.14/node_modules/@tailwindcss/oxide-linux-x64-musl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/typography@0.5.19?package-id=0e6be7de0651706b",
      "type": "library",
      "name": "@tailwindcss/typography",
      "version": "0.5.19",
      "description": "A Tailwind CSS plugin for automatically styling plain HTML content with beautiful typographic defaults.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/typography:\\@tailwindcss\\/typography:0.5.19:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/typography@0.5.19",
      "externalReferences": [
        {
          "url": "https://github.com/tailwindlabs/tailwindcss-typography",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindlabs:\\@tailwindcss\\/typography:0.5.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+typography@0.5.19_tailwindcss@4.1.14/node_modules/@tailwindcss/typography/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/vite@4.1.14?package-id=fa5aa0e2732b747b",
      "type": "library",
      "name": "@tailwindcss/vite",
      "version": "4.1.14",
      "description": "A utility-first CSS framework for rapidly building custom user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/vite:\\@tailwindcss\\/vite:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/vite@4.1.14",
      "externalReferences": [
        {
          "url": "https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        },
        {
          "url": "https://tailwindcss.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindlabs:\\@tailwindcss\\/vite:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+vite@4.1.14_vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6_/node_modules/@tailwindcss/vite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tailwindcss/vite@4.1.14?package-id=af2958f30019d98e",
      "type": "library",
      "name": "@tailwindcss/vite",
      "version": "4.1.14",
      "description": "A utility-first CSS framework for rapidly building custom user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tailwindcss\\/vite:\\@tailwindcss\\/vite:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tailwindcss/vite@4.1.14",
      "externalReferences": [
        {
          "url": "https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        },
        {
          "url": "https://tailwindcss.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindlabs:\\@tailwindcss\\/vite:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@tailwindcss+vite@4.1.14_vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6_yaml@2.9.0_/node_modules/@tailwindcss/vite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tufjs/canonical-json@2.0.0?package-id=495069d30becb599",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@tufjs/canonical-json",
      "version": "2.0.0",
      "description": "OLPC JSON canonicalization",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@tufjs\\/canonical-json:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tufjs/canonical-json@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical-json:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical_json:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical_json:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical:\\@tufjs\\/canonical-json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/canonical:\\@tufjs\\/canonical_json:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40tufjs/models@3.0.1?package-id=98d79b7d12f9be40",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "@tufjs/models",
      "version": "3.0.1",
      "description": "TUF metadata models",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:theupdateframework:\\@tufjs\\/models:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40tufjs/models@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@tufjs\\/models:\\@tufjs\\/models:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/tuf-js/node_modules/@tufjs/models/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/babel__core@7.20.5?package-id=3bc0a6b3d380399e",
      "type": "library",
      "author": "Troy Gerwien (https://github.com/yortus), Marvin Hagemeister (https://github.com/marvinhagemeister), Melvin Groenhoff (https://github.com/mgroenhoff), Jessica Franco (https://github.com/Jessidhia), Ifiok Jr. (https://github.com/ifiokjr)",
      "name": "@types/babel__core",
      "version": "7.20.5",
      "description": "TypeScript definitions for @babel/core",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/babel--core:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/babel__core@7.20.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__core",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel--core:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__core:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__core:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-core:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-core:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_core:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_core:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel--core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel__core:7.20.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+babel__core@7.20.5/node_modules/@types/babel__core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/babel__generator@7.27.0?package-id=c622a165a566af1d",
      "type": "library",
      "author": "Troy Gerwien (https://github.com/yortus), Melvin Groenhoff (https://github.com/mgroenhoff), Cameron Yan (https://github.com/khell), Lyanbin (https://github.com/Lyanbin)",
      "name": "@types/babel__generator",
      "version": "7.27.0",
      "description": "TypeScript definitions for @babel/generator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/babel--generator:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/babel__generator@7.27.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__generator",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel--generator:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__generator:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__generator:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-generator:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-generator:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_generator:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_generator:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel--generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel__generator:7.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+babel__generator@7.27.0/node_modules/@types/babel__generator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/babel__template@7.4.4?package-id=bf5af0242f0a86b8",
      "type": "library",
      "author": "Troy Gerwien (https://github.com/yortus), Marvin Hagemeister (https://github.com/marvinhagemeister), Melvin Groenhoff (https://github.com/mgroenhoff), ExE Boss (https://github.com/ExE-Boss)",
      "name": "@types/babel__template",
      "version": "7.4.4",
      "description": "TypeScript definitions for @babel/template",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/babel--template:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/babel__template@7.4.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__template",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel--template:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__template:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__template:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-template:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-template:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_template:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_template:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel--template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel__template:7.4.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+babel__template@7.4.4/node_modules/@types/babel__template/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/babel__traverse@7.28.0?package-id=6f234935cc6ef57f",
      "type": "library",
      "author": "Troy Gerwien (https://github.com/yortus), Marvin Hagemeister (https://github.com/marvinhagemeister), Ryan Petrich (https://github.com/rpetrich), Melvin Groenhoff (https://github.com/mgroenhoff), Dean L. (https://github.com/dlgrit), Ifiok Jr. (https://github.com/ifiokjr), ExE Boss (https://github.com/ExE-Boss), Daniel Tschinder (https://github.com/danez)",
      "name": "@types/babel__traverse",
      "version": "7.28.0",
      "description": "TypeScript definitions for @babel/traverse",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/babel--traverse:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/babel__traverse@7.28.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__traverse",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel--traverse:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__traverse:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel__traverse:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-traverse:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel-traverse:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_traverse:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel_traverse:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel--traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/babel:\\@types\\/babel__traverse:7.28.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+babel__traverse@7.28.0/node_modules/@types/babel__traverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/body-parser@1.19.6?package-id=9526d86f960c390f",
      "type": "library",
      "author": "Santi Albo (https://github.com/santialbo), Vilic Vane (https://github.com/vilic), Jonathan Häberle (https://github.com/dreampulse), Gevik Babakhani (https://github.com/blendsdk), Tomasz Łaziuk (https://github.com/tlaziuk), Jason Walton (https://github.com/jwalton), Piotr Błażejewicz (https://github.com/peterblazejewicz), Sebastian Beltran (https://github.com/bjohansebas)",
      "name": "@types/body-parser",
      "version": "1.19.6",
      "description": "TypeScript definitions for body-parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/body-parser:\\@types\\/body-parser:1.19.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/body-parser@1.19.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/body-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/body-parser:\\@types\\/body_parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/body_parser:\\@types\\/body-parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/body_parser:\\@types\\/body_parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/body-parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/body_parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/body:\\@types\\/body-parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/body:\\@types\\/body_parser:1.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+body-parser@1.19.6/node_modules/@types/body-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/connect@3.4.38?package-id=6ce296f6207d41de",
      "type": "library",
      "author": "Maxime LUCE (https://github.com/SomaticIT), Evan Hahn (https://github.com/EvanHahn)",
      "name": "@types/connect",
      "version": "3.4.38",
      "description": "TypeScript definitions for connect",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/connect:3.4.38:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/connect@3.4.38",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/connect",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/connect:\\@types\\/connect:3.4.38:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+connect@3.4.38/node_modules/@types/connect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3@7.4.3?package-id=970e193f253285eb",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96), Fil (https://github.com/Fil)",
      "name": "@types/d3",
      "version": "7.4.3",
      "description": "TypeScript definitions for d3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3:7.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3@7.4.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3:7.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3@7.4.3/node_modules/@types/d3/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-array@3.2.2?package-id=907c63d65c008f8e",
      "type": "library",
      "author": "Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Tom Wanzek (https://github.com/tomwanzek), denisname (https://github.com/denisname), Hugues Stefanski (https://github.com/ledragon), Nathan Bierema (https://github.com/Methuselah96), Fil (https://github.com/Fil)",
      "name": "@types/d3-array",
      "version": "3.2.2",
      "description": "TypeScript definitions for d3-array",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-array:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-array@3.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-array",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-array:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_array:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_array:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-array@3.2.2/node_modules/@types/d3-array/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-axis@3.0.6?package-id=ff3a40c42fc7e85d",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-axis",
      "version": "3.0.6",
      "description": "TypeScript definitions for d3-axis",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-axis:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-axis@3.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-axis",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-axis:\\@types\\/d3-axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-axis:\\@types\\/d3_axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_axis:\\@types\\/d3-axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_axis:\\@types\\/d3_axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_axis:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-axis@3.0.6/node_modules/@types/d3-axis/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-brush@3.0.6?package-id=68a6742ca61107fd",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-brush",
      "version": "3.0.6",
      "description": "TypeScript definitions for d3-brush",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-brush:\\@types\\/d3-brush:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-brush@3.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-brush",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-brush:\\@types\\/d3_brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_brush:\\@types\\/d3-brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_brush:\\@types\\/d3_brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_brush:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-brush@3.0.6/node_modules/@types/d3-brush/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-chord@3.0.6?package-id=4466a044a8240e10",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-chord",
      "version": "3.0.6",
      "description": "TypeScript definitions for d3-chord",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-chord:\\@types\\/d3-chord:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-chord@3.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-chord",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-chord:\\@types\\/d3_chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_chord:\\@types\\/d3-chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_chord:\\@types\\/d3_chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_chord:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-chord@3.0.6/node_modules/@types/d3-chord/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-color@3.1.3?package-id=b2169fc7f027c45f",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Hugues Stefanski (https://github.com/ledragon), Nathan Bierema (https://github.com/Methuselah96), Fil (https://github.com/Fil)",
      "name": "@types/d3-color",
      "version": "3.1.3",
      "description": "TypeScript definitions for d3-color",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-color:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-color@3.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-color",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-color:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_color:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_color:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-color@3.1.3/node_modules/@types/d3-color/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-contour@3.0.6?package-id=42b1c812afcb86b8",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Hugues Stefanski (https://github.com/Ledragon), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-contour",
      "version": "3.0.6",
      "description": "TypeScript definitions for d3-contour",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-contour:\\@types\\/d3-contour:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-contour@3.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-contour",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-contour:\\@types\\/d3_contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_contour:\\@types\\/d3-contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_contour:\\@types\\/d3_contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_contour:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-contour@3.0.6/node_modules/@types/d3-contour/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-delaunay@6.0.4?package-id=c03357d6813850e8",
      "type": "library",
      "author": "Bradley Odell (https://github.com/BTOdell), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-delaunay",
      "version": "6.0.4",
      "description": "TypeScript definitions for d3-delaunay",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-delaunay:\\@types\\/d3-delaunay:6.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-delaunay@6.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-delaunay",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-delaunay:\\@types\\/d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_delaunay:\\@types\\/d3-delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_delaunay:\\@types\\/d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-delaunay@6.0.4/node_modules/@types/d3-delaunay/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-dispatch@3.0.7?package-id=b22e8929eae7f034",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96), Kyle Hensel (https://github.com/k-yle)",
      "name": "@types/d3-dispatch",
      "version": "3.0.7",
      "description": "TypeScript definitions for d3-dispatch",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-dispatch:\\@types\\/d3-dispatch:3.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-dispatch@3.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-dispatch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-dispatch:\\@types\\/d3_dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_dispatch:\\@types\\/d3-dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_dispatch:\\@types\\/d3_dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_dispatch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-dispatch@3.0.7/node_modules/@types/d3-dispatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-drag@3.0.7?package-id=6c8d53d19ce3e8d7",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-drag",
      "version": "3.0.7",
      "description": "TypeScript definitions for d3-drag",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-drag:3.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-drag@3.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-drag",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-drag:\\@types\\/d3-drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-drag:\\@types\\/d3_drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_drag:\\@types\\/d3-drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_drag:\\@types\\/d3_drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_drag:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-drag@3.0.7/node_modules/@types/d3-drag/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-dsv@3.0.7?package-id=4adaa2a93bce4060",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-dsv",
      "version": "3.0.7",
      "description": "TypeScript definitions for d3-dsv",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-dsv:3.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-dsv@3.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-dsv",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-dsv:\\@types\\/d3-dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-dsv:\\@types\\/d3_dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_dsv:\\@types\\/d3-dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_dsv:\\@types\\/d3_dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_dsv:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-dsv@3.0.7/node_modules/@types/d3-dsv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-ease@3.0.2?package-id=ab9c465ef45a244e",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-ease",
      "version": "3.0.2",
      "description": "TypeScript definitions for d3-ease",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-ease@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-ease",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-ease:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-ease:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_ease:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_ease:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-ease@3.0.2/node_modules/@types/d3-ease/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-fetch@3.0.7?package-id=b778d6a9d7929931",
      "type": "library",
      "author": "Hugues Stefanski (https://github.com/ledragon), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-fetch",
      "version": "3.0.7",
      "description": "TypeScript definitions for d3-fetch",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-fetch:\\@types\\/d3-fetch:3.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-fetch@3.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-fetch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-fetch:\\@types\\/d3_fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_fetch:\\@types\\/d3-fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_fetch:\\@types\\/d3_fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_fetch:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-fetch@3.0.7/node_modules/@types/d3-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-force@3.0.10?package-id=fa2ec189dc225a97",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-force",
      "version": "3.0.10",
      "description": "TypeScript definitions for d3-force",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-force:\\@types\\/d3-force:3.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-force@3.0.10",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-force",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-force:\\@types\\/d3_force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_force:\\@types\\/d3-force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_force:\\@types\\/d3_force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_force:3.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-force@3.0.10/node_modules/@types/d3-force/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-format@3.0.4?package-id=28dfcfc918269d72",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-format",
      "version": "3.0.4",
      "description": "TypeScript definitions for d3-format",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-format:\\@types\\/d3-format:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-format@3.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-format",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-format:\\@types\\/d3_format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_format:\\@types\\/d3-format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_format:\\@types\\/d3_format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_format:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-format@3.0.4/node_modules/@types/d3-format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-geo@3.1.0?package-id=9e92408eade7d981",
      "type": "library",
      "author": "Hugues Stefanski (https://github.com/ledragon), Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-geo",
      "version": "3.1.0",
      "description": "TypeScript definitions for d3-geo",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-geo:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-geo@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-geo",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-geo:\\@types\\/d3-geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-geo:\\@types\\/d3_geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_geo:\\@types\\/d3-geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_geo:\\@types\\/d3_geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_geo:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-geo@3.1.0/node_modules/@types/d3-geo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-hierarchy@3.1.7?package-id=40db4ce807dff969",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96), Fil (https://github.com/Fil)",
      "name": "@types/d3-hierarchy",
      "version": "3.1.7",
      "description": "TypeScript definitions for d3-hierarchy",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-hierarchy:\\@types\\/d3-hierarchy:3.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-hierarchy@3.1.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-hierarchy",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-hierarchy:\\@types\\/d3_hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_hierarchy:\\@types\\/d3-hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_hierarchy:\\@types\\/d3_hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_hierarchy:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-hierarchy@3.1.7/node_modules/@types/d3-hierarchy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-interpolate@3.0.4?package-id=2dc8402b7437fe0d",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-interpolate",
      "version": "3.0.4",
      "description": "TypeScript definitions for d3-interpolate",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-interpolate:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-interpolate@3.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-interpolate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-interpolate:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_interpolate:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_interpolate:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-interpolate@3.0.4/node_modules/@types/d3-interpolate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-path@3.1.1?package-id=e9e682f3f5b49599",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-path",
      "version": "3.1.1",
      "description": "TypeScript definitions for d3-path",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-path@3.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-path",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-path:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-path:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_path:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_path:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-path@3.1.1/node_modules/@types/d3-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-polygon@3.0.2?package-id=3398cbbd033c754f",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-polygon",
      "version": "3.0.2",
      "description": "TypeScript definitions for d3-polygon",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-polygon:\\@types\\/d3-polygon:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-polygon@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-polygon",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-polygon:\\@types\\/d3_polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_polygon:\\@types\\/d3-polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_polygon:\\@types\\/d3_polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_polygon:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-polygon@3.0.2/node_modules/@types/d3-polygon/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-quadtree@3.0.6?package-id=8553a80a8e035e16",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-quadtree",
      "version": "3.0.6",
      "description": "TypeScript definitions for d3-quadtree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-quadtree:\\@types\\/d3-quadtree:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-quadtree@3.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-quadtree",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-quadtree:\\@types\\/d3_quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_quadtree:\\@types\\/d3-quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_quadtree:\\@types\\/d3_quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_quadtree:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-quadtree@3.0.6/node_modules/@types/d3-quadtree/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-random@3.0.3?package-id=7c60621b0f03ee12",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-random",
      "version": "3.0.3",
      "description": "TypeScript definitions for d3-random",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-random:\\@types\\/d3-random:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-random@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-random",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-random:\\@types\\/d3_random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_random:\\@types\\/d3-random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_random:\\@types\\/d3_random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_random:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-random@3.0.3/node_modules/@types/d3-random/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-scale@4.0.9?package-id=616f42f1d91ac982",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), rulonder (https://github.com/rulonder), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-scale",
      "version": "4.0.9",
      "description": "TypeScript definitions for d3-scale",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-scale@4.0.9",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-scale",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-scale@4.0.9/node_modules/@types/d3-scale/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-scale-chromatic@3.1.0?package-id=d15c481e9a814722",
      "type": "library",
      "author": "Hugues Stefanski (https://github.com/Ledragon), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Henrique Machado (https://github.com/henriquefm), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-scale-chromatic",
      "version": "3.1.0",
      "description": "TypeScript definitions for d3-scale-chromatic",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-scale-chromatic:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-scale-chromatic@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-scale-chromatic",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-scale-chromatic:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale_chromatic:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale_chromatic:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-scale-chromatic@3.1.0/node_modules/@types/d3-scale-chromatic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-selection@3.0.11?package-id=cf1e7be9d4c90dc7",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96), Ambar Mutha (https://github.com/ambar-arkin)",
      "name": "@types/d3-selection",
      "version": "3.0.11",
      "description": "TypeScript definitions for d3-selection",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-selection:\\@types\\/d3-selection:3.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-selection@3.0.11",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-selection",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-selection:\\@types\\/d3_selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_selection:\\@types\\/d3-selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_selection:\\@types\\/d3_selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_selection:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-selection@3.0.11/node_modules/@types/d3-selection/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-shape@3.1.7?package-id=cc71817ed825230a",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96), Fil (https://github.com/Fil)",
      "name": "@types/d3-shape",
      "version": "3.1.7",
      "description": "TypeScript definitions for d3-shape",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-shape:\\@types\\/d3-shape:3.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-shape@3.1.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-shape",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-shape:\\@types\\/d3_shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_shape:\\@types\\/d3-shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_shape:\\@types\\/d3_shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_shape:3.1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-shape@3.1.7/node_modules/@types/d3-shape/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-time@3.0.4?package-id=0bf46cbfea61c7de",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-time",
      "version": "3.0.4",
      "description": "TypeScript definitions for d3-time",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-time@3.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-time",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-time@3.0.4/node_modules/@types/d3-time/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-time-format@4.0.3?package-id=d5fede2a82409d01",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-time-format",
      "version": "4.0.3",
      "description": "TypeScript definitions for d3-time-format",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-time-format:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-time-format@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-time-format",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-time-format:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time_format:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time_format:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-time-format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_time_format:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-time-format@4.0.3/node_modules/@types/d3-time-format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-timer@3.0.2?package-id=13e3566114efdff0",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-timer",
      "version": "3.0.2",
      "description": "TypeScript definitions for d3-timer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-timer:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-timer@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-timer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-timer:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_timer:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_timer:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-timer@3.0.2/node_modules/@types/d3-timer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-transition@3.0.9?package-id=72ec535997a30207",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), Robert Moura (https://github.com/robertmoura), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-transition",
      "version": "3.0.9",
      "description": "TypeScript definitions for d3-transition",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/d3-transition:\\@types\\/d3-transition:3.0.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-transition@3.0.9",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-transition",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-transition:\\@types\\/d3_transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_transition:\\@types\\/d3-transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_transition:\\@types\\/d3_transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_transition:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-transition@3.0.9/node_modules/@types/d3-transition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/d3-zoom@3.0.8?package-id=6fc686da449171fc",
      "type": "library",
      "author": "Tom Wanzek (https://github.com/tomwanzek), Alex Ford (https://github.com/gustavderdrache), Boris Yankov (https://github.com/borisyankov), denisname (https://github.com/denisname), Nathan Bierema (https://github.com/Methuselah96)",
      "name": "@types/d3-zoom",
      "version": "3.0.8",
      "description": "TypeScript definitions for d3-zoom",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3-zoom:3.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/d3-zoom@3.0.8",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-zoom",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/d3_zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-zoom:\\@types\\/d3-zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3-zoom:\\@types\\/d3_zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_zoom:\\@types\\/d3-zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3_zoom:\\@types\\/d3_zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_zoom:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+d3-zoom@3.0.8/node_modules/@types/d3-zoom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/debug@4.1.12?package-id=2ad255fc819f45a5",
      "type": "library",
      "author": "Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)",
      "name": "@types/debug",
      "version": "4.1.12",
      "description": "TypeScript definitions for debug",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/debug@4.1.12",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+debug@4.1.12/node_modules/@types/debug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/estree@1.0.8?package-id=d9af7bf86157da67",
      "type": "library",
      "author": "RReverser (https://github.com/RReverser)",
      "name": "@types/estree",
      "version": "1.0.8",
      "description": "TypeScript definitions for estree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/estree:1.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/estree@1.0.8",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree:\\@types\\/estree:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+estree@1.0.8/node_modules/@types/estree/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/estree-jsx@1.0.5?package-id=a42ce9e8aa716f67",
      "type": "library",
      "author": "Tony Ross (https://github.com/antross)",
      "name": "@types/estree-jsx",
      "version": "1.0.5",
      "description": "TypeScript definitions for estree-jsx",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/estree-jsx:\\@types\\/estree-jsx:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/estree-jsx@1.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree-jsx",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree-jsx:\\@types\\/estree_jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree_jsx:\\@types\\/estree-jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree_jsx:\\@types\\/estree_jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/estree-jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/estree_jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree:\\@types\\/estree-jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/estree:\\@types\\/estree_jsx:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+estree-jsx@1.0.5/node_modules/@types/estree-jsx/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/express@4.17.21?package-id=782747964ff8a04a",
      "type": "library",
      "author": "Boris Yankov (https://github.com/borisyankov), China Medical University Hospital (https://github.com/CMUH), Puneet Arora (https://github.com/puneetar), Dylan Frankland (https://github.com/dfrankland)",
      "name": "@types/express",
      "version": "4.17.21",
      "description": "TypeScript definitions for express",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/express:4.17.21:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/express@4.17.21",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express:\\@types\\/express:4.17.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+express@4.17.21/node_modules/@types/express/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/express-serve-static-core@4.19.6?package-id=2a2524d767e928f9",
      "type": "library",
      "author": "Boris Yankov (https://github.com/borisyankov), Satana Charuwichitratana (https://github.com/micksatana), Jose Luis Leon (https://github.com/JoseLion), David Stephens (https://github.com/dwrss), Shin Ando (https://github.com/andoshin11)",
      "name": "@types/express-serve-static-core",
      "version": "4.19.6",
      "description": "TypeScript definitions for express-serve-static-core",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/express-serve-static-core:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/express-serve-static-core@4.19.6",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express-serve-static-core",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express-serve-static-core:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve_static_core:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve_static_core:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express-serve-static:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express-serve-static:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve_static:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve_static:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express-serve:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express-serve:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express_serve:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express:\\@types\\/express-serve-static-core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/express:\\@types\\/express_serve_static_core:4.19.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+express-serve-static-core@4.19.6/node_modules/@types/express-serve-static-core/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/geojson@7946.0.16?package-id=d00fcb8561447560",
      "type": "library",
      "author": "Jacob Bruun (https://github.com/cobster), Arne Schubert (https://github.com/atd-schubert), Jeff Jacobson (https://github.com/JeffJacobson), Ilia Choly (https://github.com/icholy), Dan Vanderkam (https://github.com/danvk)",
      "name": "@types/geojson",
      "version": "7946.0.16",
      "description": "TypeScript definitions for geojson",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/geojson:7946.0.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/geojson@7946.0.16",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/geojson",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/geojson:\\@types\\/geojson:7946.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+geojson@7946.0.16/node_modules/@types/geojson/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/google.maps@3.58.1?package-id=9107cf5a566d77c9",
      "type": "library",
      "author": "Ken Nevarez (https://github.com/kwnevarez), Angela Yu (https://github.com/wangela)",
      "name": "@types/google.maps",
      "version": "3.58.1",
      "description": "TypeScript definitions for google.maps",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/google.maps:\\@types\\/google.maps:3.58.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/google.maps@3.58.1",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/google.maps",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/google.maps:3.58.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+google.maps@3.58.1/node_modules/@types/google.maps/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/hast@3.0.4?package-id=5fc7b4cb76af629c",
      "type": "library",
      "author": "lukeggchapman (https://github.com/lukeggchapman), Junyoung Choi (https://github.com/rokt33r), Christian Murphy (https://github.com/ChristianMurphy), Remco Haszing (https://github.com/remcohaszing)",
      "name": "@types/hast",
      "version": "3.0.4",
      "description": "TypeScript definitions for hast",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/hast:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/hast@3.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/hast",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/hast:\\@types\\/hast:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+hast@3.0.4/node_modules/@types/hast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/http-errors@2.0.5?package-id=ff6995e58c9246e0",
      "type": "library",
      "author": "Tanguy Krotoff (https://github.com/tkrotoff), BendingBender (https://github.com/BendingBender), Sebastian Beltran (https://github.com/bjohansebas)",
      "name": "@types/http-errors",
      "version": "2.0.5",
      "description": "TypeScript definitions for http-errors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/http-errors:\\@types\\/http-errors:2.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/http-errors@2.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-errors",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/http-errors:\\@types\\/http_errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/http_errors:\\@types\\/http-errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/http_errors:\\@types\\/http_errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/http-errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/http_errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/http:\\@types\\/http-errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/http:\\@types\\/http_errors:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+http-errors@2.0.5/node_modules/@types/http-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/katex@0.16.7?package-id=0b69cd3be634fd9d",
      "type": "library",
      "author": "Michael Randolph (https://github.com/mrand01), Kevin Nguyen (https://github.com/knguyen0125), bLue (https://github.com/dreamerblue), Sebastian Weigand (https://github.com/s-weigand), sapphi-red (https://github.com/sapphi-red), Stefaans (https://github.com/Stefaans)",
      "name": "@types/katex",
      "version": "0.16.7",
      "description": "TypeScript definitions for katex",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/katex:0.16.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/katex@0.16.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/katex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/katex:\\@types\\/katex:0.16.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+katex@0.16.7/node_modules/@types/katex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/mdast@4.0.4?package-id=4c2cbea3e4f69ced",
      "type": "library",
      "author": "Christian Murphy (https://github.com/ChristianMurphy), Jun Lu (https://github.com/lujun2), Remco Haszing (https://github.com/remcohaszing), Titus Wormer (https://github.com/wooorm), Remco Haszing (https://github.com/remcohaszing)",
      "name": "@types/mdast",
      "version": "4.0.4",
      "description": "TypeScript definitions for mdast",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/mdast:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/mdast@4.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mdast",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/mdast:\\@types\\/mdast:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+mdast@4.0.4/node_modules/@types/mdast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/mime@1.3.5?package-id=49c6e48306d40700",
      "type": "library",
      "author": "Jeff Goddard (https://github.com/jedigo), Daniel Hritzkiv (https://github.com/dhritzkiv)",
      "name": "@types/mime",
      "version": "1.3.5",
      "description": "TypeScript definitions for mime",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/mime:1.3.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/mime@1.3.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mime",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/mime:\\@types\\/mime:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+mime@1.3.5/node_modules/@types/mime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/ms@2.1.0?package-id=c28eb07057cf9ff9",
      "type": "library",
      "author": "Zhiyuan Wang (https://github.com/danny8002)",
      "name": "@types/ms",
      "version": "2.1.0",
      "description": "TypeScript definitions for ms",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/ms@2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+ms@2.1.0/node_modules/@types/ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/node@12.20.55?package-id=1954c74901fd33a4",
      "type": "library",
      "author": "Microsoft TypeScript (https://github.com/Microsoft), DefinitelyTyped (https://github.com/DefinitelyTyped), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Hoàng Văn Khải (https://github.com/KSXGitHub), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nicolas Even (https://github.com/n-e), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Simon Schick (https://github.com/SimonSchick), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Zane Hannan AU (https://github.com/ZaneHannanAU), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss)",
      "name": "@types/node",
      "version": "12.20.55",
      "description": "TypeScript definitions for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:12.20.55:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/node@12.20.55",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:12.20.55:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+node@12.20.55/node_modules/@types/node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/node@14.18.63?package-id=726a65593f690fc6",
      "type": "library",
      "author": "Microsoft TypeScript (https://github.com/Microsoft), DefinitelyTyped (https://github.com/DefinitelyTyped), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Hoàng Văn Khải (https://github.com/KSXGitHub), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nicolas Even (https://github.com/n-e), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Seth Westphal (https://github.com/westy92), Simon Schick (https://github.com/SimonSchick), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), Bond (https://github.com/bondz), Linus Unnebäck (https://github.com/LinusU)",
      "name": "@types/node",
      "version": "14.18.63",
      "description": "TypeScript definitions for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:14.18.63:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/node@14.18.63",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:14.18.63:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+node@14.18.63/node_modules/@types/node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/node@22.7.5?package-id=901df55fd175bf71",
      "type": "library",
      "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)",
      "name": "@types/node",
      "version": "22.7.5",
      "description": "TypeScript definitions for node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/node@22.7.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+node@22.7.5/node_modules/@types/node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/node@24.7.0?package-id=1d2a9d47dba61c92",
      "type": "library",
      "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky), René (https://github.com/Renegade334), Yagiz Nizipli (https://github.com/anonrig)",
      "name": "@types/node",
      "version": "24.7.0",
      "description": "TypeScript definitions for node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:24.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/node@24.7.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:24.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+node@24.7.0/node_modules/@types/node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/pako@2.0.4?package-id=49b27cb1df331e0e",
      "type": "library",
      "author": "Caleb Eggensperger (https://github.com/calebegg), Muhammet Öztürk (https://github.com/hlthi), Thibault Poisson (https://github.com/OrIOg)",
      "name": "@types/pako",
      "version": "2.0.4",
      "description": "TypeScript definitions for pako",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/pako:2.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/pako@2.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/pako",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/pako:\\@types\\/pako:2.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+pako@2.0.4/node_modules/@types/pako/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/qs@6.14.0?package-id=18ebcc686228e6a6",
      "type": "library",
      "author": "Roman Korneev (https://github.com/RWander), Leon Yu (https://github.com/leonyu), Belinda Teh (https://github.com/tehbelinda), Melvin Lee (https://github.com/zyml), Arturs Vonda (https://github.com/artursvonda), Carlos Bonetti (https://github.com/CarlosBonetti), Dan Smith (https://github.com/dpsmith3), Hunter Perrin (https://github.com/hperrin), Jordan Harband (https://github.com/ljharb)",
      "name": "@types/qs",
      "version": "6.14.0",
      "description": "TypeScript definitions for qs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/qs:6.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/qs@6.14.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/qs",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/qs:\\@types\\/qs:6.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+qs@6.14.0/node_modules/@types/qs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/raf@3.4.3?package-id=2e257d443fb3edc8",
      "type": "library",
      "author": "Ben Lorantfy (https://github.com/BenLorantfy)",
      "name": "@types/raf",
      "version": "3.4.3",
      "description": "TypeScript definitions for raf",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/raf:3.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/raf@3.4.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/raf",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/raf:\\@types\\/raf:3.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+raf@3.4.3/node_modules/@types/raf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/range-parser@1.2.7?package-id=5ada45c644490db5",
      "type": "library",
      "author": "Tomek Łaziuk (https://github.com/tlaziuk)",
      "name": "@types/range-parser",
      "version": "1.2.7",
      "description": "TypeScript definitions for range-parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/range-parser:\\@types\\/range-parser:1.2.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/range-parser@1.2.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/range-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/range-parser:\\@types\\/range_parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/range_parser:\\@types\\/range-parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/range_parser:\\@types\\/range_parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/range-parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/range_parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/range:\\@types\\/range-parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/range:\\@types\\/range_parser:1.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+range-parser@1.2.7/node_modules/@types/range-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/react@19.2.1?package-id=614fd2016e06a97a",
      "type": "library",
      "author": "Asana (https://asana.com), AssureSign (http://www.assuresign.com), Microsoft (https://microsoft.com), John Reilly (https://github.com/johnnyreilly), Benoit Benezech (https://github.com/bbenezech), Patricio Zavolinsky (https://github.com/pzavolinsky), Eric Anderson (https://github.com/ericanderson), Dovydas Navickas (https://github.com/DovydasNavickas), Josh Rutherford (https://github.com/theruther4d), Guilherme Hübner (https://github.com/guilhermehubner), Ferdy Budhidharma (https://github.com/ferdaber), Johann Rakotoharisoa (https://github.com/jrakotoharisoa), Olivier Pascal (https://github.com/pascaloliv), Martin Hochel (https://github.com/hotell), Frank Li (https://github.com/franklixuefei), Jessica Franco (https://github.com/Jessidhia), Saransh Kataria (https://github.com/saranshkataria), Kanitkorn Sujautra (https://github.com/lukyth), Sebastian Silbermann (https://github.com/eps1lon), Kyle Scully (https://github.com/zieka), Cong Zhang (https://github.com/dancerphil), Dimitri Mitropoulos (https://github.com/dimitropoulos), JongChan Choi (https://github.com/disjukr), Victor Magalhães (https://github.com/vhfmag), Priyanshu Rav (https://github.com/priyanshurav), Dmitry Semigradsky (https://github.com/Semigradsky), Matt Pocock (https://github.com/mattpocock)",
      "name": "@types/react",
      "version": "19.2.1",
      "description": "TypeScript definitions for react",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react:19.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/react@19.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+react@19.2.1/node_modules/@types/react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/react-dom@19.2.1?package-id=fe8efca3f49cbf5c",
      "type": "library",
      "author": "Asana (https://asana.com), AssureSign (http://www.assuresign.com), Microsoft (https://microsoft.com), MartynasZilinskas (https://github.com/MartynasZilinskas), Josh Rutherford (https://github.com/theruther4d), Jessica Franco (https://github.com/Jessidhia), Sebastian Silbermann (https://github.com/eps1lon)",
      "name": "@types/react-dom",
      "version": "19.2.1",
      "description": "TypeScript definitions for react-dom",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/react-dom:\\@types\\/react-dom:19.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/react-dom@19.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react-dom",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react-dom:\\@types\\/react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react_dom:\\@types\\/react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react_dom:\\@types\\/react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+react-dom@19.2.1_@types+react@19.2.1/node_modules/@types/react-dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/send@0.17.5?package-id=bed3efe6bdc529c9",
      "type": "library",
      "author": "Mike Jerred (https://github.com/MikeJerred), Piotr Błażejewicz (https://github.com/peterblazejewicz), Sebastian Beltran (https://github.com/bjohansebas)",
      "name": "@types/send",
      "version": "0.17.5",
      "description": "TypeScript definitions for send",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/send:0.17.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/send@0.17.5",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/send",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/send:\\@types\\/send:0.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+send@0.17.5/node_modules/@types/send/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/send@1.2.0?package-id=73358da7f1425649",
      "type": "library",
      "author": "Mike Jerred (https://github.com/MikeJerred), Piotr Błażejewicz (https://github.com/peterblazejewicz), Sebastian Beltran (https://github.com/bjohansebas)",
      "name": "@types/send",
      "version": "1.2.0",
      "description": "TypeScript definitions for send",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/send:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/send@1.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/send",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/send:\\@types\\/send:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+send@1.2.0/node_modules/@types/send/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/serve-static@1.15.9?package-id=6097982c6ef33268",
      "type": "library",
      "author": "Uros Smolnik (https://github.com/urossmolnik), Linus Unnebäck (https://github.com/LinusU), Devansh Jethmalani (https://github.com/devanshj), Sebastian Beltran (https://github.com/bjohansebas)",
      "name": "@types/serve-static",
      "version": "1.15.9",
      "description": "TypeScript definitions for serve-static",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/serve-static:\\@types\\/serve-static:1.15.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/serve-static@1.15.9",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/serve-static",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/serve-static:\\@types\\/serve_static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/serve_static:\\@types\\/serve-static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/serve_static:\\@types\\/serve_static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/serve-static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/serve_static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/serve:\\@types\\/serve-static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/serve:\\@types\\/serve_static:1.15.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+serve-static@1.15.9/node_modules/@types/serve-static/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/trusted-types@2.0.7?package-id=fb3cf8c44cbdd647",
      "type": "library",
      "author": "Jakub Vrana (https://github.com/vrana), Damien Engels (https://github.com/engelsdamien), Emanuel Tesar (https://github.com/siegrift), Bjarki (https://github.com/bjarkler), Sebastian Silbermann (https://github.com/eps1lon)",
      "name": "@types/trusted-types",
      "version": "2.0.7",
      "description": "TypeScript definitions for trusted-types",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@types\\/trusted-types:\\@types\\/trusted-types:2.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/trusted-types@2.0.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/trusted-types",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/trusted-types:\\@types\\/trusted_types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/trusted_types:\\@types\\/trusted-types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/trusted_types:\\@types\\/trusted_types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/trusted-types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/trusted_types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/trusted:\\@types\\/trusted-types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/trusted:\\@types\\/trusted_types:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+trusted-types@2.0.7/node_modules/@types/trusted-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/unist@2.0.11?package-id=9907c4ba2e8bcd09",
      "type": "library",
      "author": "bizen241 (https://github.com/bizen241), Jun Lu (https://github.com/lujun2), Hernan Rajchert (https://github.com/hrajchert), Titus Wormer (https://github.com/wooorm), Junyoung Choi (https://github.com/rokt33r), Ben Moon (https://github.com/GuiltyDolphin), JounQin (https://github.com/JounQin)",
      "name": "@types/unist",
      "version": "2.0.11",
      "description": "TypeScript definitions for unist",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/unist:2.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/unist@2.0.11",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/unist",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/unist:\\@types\\/unist:2.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+unist@2.0.11/node_modules/@types/unist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/unist@3.0.3?package-id=5e40ac971ec8ccea",
      "type": "library",
      "author": "bizen241 (https://github.com/bizen241), Jun Lu (https://github.com/lujun2), Hernan Rajchert (https://github.com/hrajchert), Titus Wormer (https://github.com/wooorm), Junyoung Choi (https://github.com/rokt33r), Ben Moon (https://github.com/GuiltyDolphin), JounQin (https://github.com/JounQin), Remco Haszing (https://github.com/remcohaszing)",
      "name": "@types/unist",
      "version": "3.0.3",
      "description": "TypeScript definitions for unist",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/unist:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/unist@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/unist",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/unist:\\@types\\/unist:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+unist@3.0.3/node_modules/@types/unist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/uuid@10.0.0?package-id=bf7a925f4bc78fa1",
      "type": "library",
      "author": "Oliver Hoffmann (https://github.com/iamolivinius), Felipe Ochoa (https://github.com/felipeochoa), Chris Barth (https://github.com/cjbarth), Linus Unnebäck (https://github.com/LinusU), Christoph Tavan (https://github.com/ctavan)",
      "name": "@types/uuid",
      "version": "10.0.0",
      "description": "TypeScript definitions for uuid",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/uuid:10.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/uuid@10.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/uuid",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/uuid:\\@types\\/uuid:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+uuid@10.0.0/node_modules/@types/uuid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/ws@7.4.7?package-id=3a90c9a3b7936411",
      "type": "library",
      "author": "Paul Loyd (https://github.com/loyd), Margus Lamp (https://github.com/mlamp), Philippe D'Alva (https://github.com/TitaneBoy), reduckted (https://github.com/reduckted), teidesu (https://github.com/teidesu), Bartosz Wojtkowiak (https://github.com/wojtkowiak), Kyle Hensel (https://github.com/k-yle)",
      "name": "@types/ws",
      "version": "7.4.7",
      "description": "TypeScript definitions for ws",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/ws:7.4.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/ws@7.4.7",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/ws:\\@types\\/ws:7.4.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+ws@7.4.7/node_modules/@types/ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40types/ws@8.18.1?package-id=10b470459f3737aa",
      "type": "library",
      "author": "Paul Loyd (https://github.com/loyd), Margus Lamp (https://github.com/mlamp), Philippe D'Alva (https://github.com/TitaneBoy), reduckted (https://github.com/reduckted), teidesu (https://github.com/teidesu), Bartosz Wojtkowiak (https://github.com/wojtkowiak), Kyle Hensel (https://github.com/k-yle), Samuel Skeen (https://github.com/cwadrupldijjit)",
      "name": "@types/ws",
      "version": "8.18.1",
      "description": "TypeScript definitions for ws",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/ws:8.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40types/ws@8.18.1",
      "externalReferences": [
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@types\\/ws:\\@types\\/ws:8.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@types+ws@8.18.1/node_modules/@types/ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40typescript/typescript6@6.0.2?package-id=8c60f9bf605726cd",
      "type": "library",
      "author": "Microsoft Corp.",
      "name": "@typescript/typescript6",
      "version": "6.0.2",
      "description": "TypeScript is a language for application scale JavaScript development",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@typescript\\/typescript6:\\@typescript\\/typescript6:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40typescript/typescript6@6.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/microsoft/TypeScript.git",
          "type": "distribution"
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:\\@typescript\\/typescript6:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@typescript+typescript6@6.0.2/node_modules/@typescript/typescript6/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40ungap/structured-clone@1.3.0?package-id=ef54faf5126fc9a6",
      "type": "library",
      "author": "Andrea Giammarchi",
      "name": "@ungap/structured-clone",
      "version": "1.3.0",
      "description": "A structuredClone polyfill",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@ungap\\/structured-clone:\\@ungap\\/structured-clone:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40ungap/structured-clone@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ungap/structured-clone.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ungap/structured-clone#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@ungap\\/structured-clone:\\@ungap\\/structured_clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@ungap\\/structured_clone:\\@ungap\\/structured-clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@ungap\\/structured_clone:\\@ungap\\/structured_clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@ungap\\/structured:\\@ungap\\/structured-clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@ungap\\/structured:\\@ungap\\/structured_clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ungap:\\@ungap\\/structured-clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ungap:\\@ungap\\/structured_clone:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@ungap+structured-clone@1.3.0/node_modules/@ungap/structured-clone/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitejs/plugin-react@5.0.4?package-id=aa21f4714e9e2c03",
      "type": "library",
      "author": "Evan You, Alec Larson, Arnaud Barré",
      "name": "@vitejs/plugin-react",
      "version": "5.0.4",
      "description": "The default Vite plugin for React projects",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitejs/plugin-react@5.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitejs/vite-plugin-react.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitejs+plugin-react@5.0.4_vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6_/node_modules/@vitejs/plugin-react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitejs/plugin-react@5.0.4?package-id=aaa69ecf8c1596db",
      "type": "library",
      "author": "Evan You, Alec Larson, Arnaud Barré",
      "name": "@vitejs/plugin-react",
      "version": "5.0.4",
      "description": "The default Vite plugin for React projects",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitejs/plugin-react@5.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitejs/vite-plugin-react.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin-react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin_react:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitejs+plugin-react@5.0.4_vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6_yaml@2.9.0_/node_modules/@vitejs/plugin-react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/expect@2.1.9?package-id=00215677e9aad825",
      "type": "library",
      "name": "@vitest/expect",
      "version": "2.1.9",
      "description": "Jest's expect matchers as a Chai plugin",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/expect:\\@vitest\\/expect:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/expect@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/expect#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/expect:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+expect@2.1.9/node_modules/@vitest/expect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/mocker@2.1.9?package-id=371e915132700db8",
      "type": "library",
      "name": "@vitest/mocker",
      "version": "2.1.9",
      "description": "Vitest module mocker implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/mocker:\\@vitest\\/mocker:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/mocker@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/mocker#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/mocker:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+mocker@2.1.9_vite@5.4.20_@types+node@24.7.0_lightningcss@1.30.1_/node_modules/@vitest/mocker/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/pretty-format@2.1.9?package-id=d92cf3353cad581e",
      "type": "library",
      "name": "@vitest/pretty-format",
      "version": "2.1.9",
      "description": "Fork of pretty-format with support for ESM",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/pretty-format:\\@vitest\\/pretty-format:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/pretty-format@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitest\\/pretty-format:\\@vitest\\/pretty_format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitest\\/pretty_format:\\@vitest\\/pretty-format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitest\\/pretty_format:\\@vitest\\/pretty_format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitest\\/pretty:\\@vitest\\/pretty-format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@vitest\\/pretty:\\@vitest\\/pretty_format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/pretty-format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/pretty_format:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+pretty-format@2.1.9/node_modules/@vitest/pretty-format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/runner@2.1.9?package-id=ab44349fb05a0524",
      "type": "library",
      "name": "@vitest/runner",
      "version": "2.1.9",
      "description": "Vitest test runner",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/runner:\\@vitest\\/runner:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/runner@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/runner#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/runner:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+runner@2.1.9/node_modules/@vitest/runner/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/snapshot@2.1.9?package-id=c5e9a7f748c24dc8",
      "type": "library",
      "name": "@vitest/snapshot",
      "version": "2.1.9",
      "description": "Vitest snapshot manager",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/snapshot:\\@vitest\\/snapshot:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/snapshot@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/snapshot#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/snapshot:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+snapshot@2.1.9/node_modules/@vitest/snapshot/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/spy@2.1.9?package-id=25707ec281a58192",
      "type": "library",
      "name": "@vitest/spy",
      "version": "2.1.9",
      "description": "Lightweight Jest compatible spy implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/spy:\\@vitest\\/spy:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/spy@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/spy#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/spy:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+spy@2.1.9/node_modules/@vitest/spy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/%40vitest/utils@2.1.9?package-id=c1f47d2800671b12",
      "type": "library",
      "name": "@vitest/utils",
      "version": "2.1.9",
      "description": "Shared Vitest utility functions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:\\@vitest\\/utils:\\@vitest\\/utils:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/%40vitest/utils@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/tree/main/packages/utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:\\@vitest\\/utils:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@vitest+utils@2.1.9/node_modules/@vitest/utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/FSharp.Compiler.Service@43.12.204?package-id=1fe39ad74bad3fcd",
      "type": "library",
      "name": "FSharp.Compiler.Service",
      "version": "43.12.204",
      "cpe": "cpe:2.3:a:fsharp_compiler_service:fsharp_compiler_service_.net:43.12.204:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/FSharp.Compiler.Service@43.12.204",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fsharp_compiler_service:fsharp_compiler_service:43.12.204:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/FSharp.Compiler.Service@43.12.204?package-id=b085873fc9a2c5e1",
      "type": "library",
      "name": "FSharp.Compiler.Service",
      "version": "43.12.204",
      "cpe": "cpe:2.3:a:fsharp_compiler_service:fsharp_compiler_service_.net:43.12.204:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/FSharp.Compiler.Service@43.12.204",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fsharp_compiler_service:fsharp_compiler_service:43.12.204:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/FSharp.Core@10.1.204?package-id=a4de908a42f1c6df",
      "type": "library",
      "name": "FSharp.Core",
      "version": "10.1.204",
      "cpe": "cpe:2.3:a:fsharp_core:fsharp_core_.net:10.1.204:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/FSharp.Core@10.1.204",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fsharp_core:fsharp_core:10.1.204:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/FSharp.Core@10.1.204?package-id=67dbfd73978866b3",
      "type": "library",
      "name": "FSharp.Core",
      "version": "10.1.204",
      "cpe": "cpe:2.3:a:fsharp_core:fsharp_core_.net:10.1.204:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/FSharp.Core@10.1.204",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fsharp_core:fsharp_core:10.1.204:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0?package-id=b987e2b26bf0d48b",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.CSharp",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_csharp:microsoft_codeanalysis_csharp_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_csharp:microsoft_codeanalysis_csharp:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0?package-id=c9279b7c8f0a43cf",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.CSharp",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_csharp:microsoft_codeanalysis_csharp_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_csharp:microsoft_codeanalysis_csharp:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=9da777fe6e3b9875",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.Common",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_common:microsoft_codeanalysis_common_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_common:microsoft_codeanalysis_common:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=cb0c97b65e583ff8",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.Common",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_common:microsoft_codeanalysis_common_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_common:microsoft_codeanalysis_common:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0?package-id=ad7b1cd01e73df7a",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.VisualBasic",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_visualbasic:microsoft_codeanalysis_visualbasic_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_visualbasic:microsoft_codeanalysis_visualbasic:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0?package-id=16769f309f725a64",
      "type": "library",
      "name": "Microsoft.CodeAnalysis.VisualBasic",
      "version": "5.3.0",
      "cpe": "cpe:2.3:a:microsoft_codeanalysis_visualbasic:microsoft_codeanalysis_visualbasic_.net:5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft_codeanalysis_visualbasic:microsoft_codeanalysis_visualbasic:5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/System.CommandLine@2.0.2?package-id=3bce88f3906a8ea5",
      "type": "library",
      "name": "System.CommandLine",
      "version": "2.0.2",
      "cpe": "cpe:2.3:a:system_commandline:system_commandline_.net:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/System.CommandLine@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:system_commandline:system_commandline:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/System.CommandLine@2.0.2?package-id=7092fadd920fcea9",
      "type": "library",
      "name": "System.CommandLine",
      "version": "2.0.2",
      "cpe": "cpe:2.3:a:system_commandline:system_commandline_.net:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/System.CommandLine@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:system_commandline:system_commandline:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/System.Reflection.MetadataLoadContext@10.0.2?package-id=11f78d344da14e6f",
      "type": "library",
      "name": "System.Reflection.MetadataLoadContext",
      "version": "10.0.2",
      "cpe": "cpe:2.3:a:system_reflection_metadataloadcontext:system_reflection_metadataloadcontext_.net:10.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/System.Reflection.MetadataLoadContext@10.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:system_reflection_metadataloadcontext:system_reflection_metadataloadcontext:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/dosai/dosai-linux-amd64"
        }
      ]
    },
    {
      "bom-ref": "pkg:nuget/System.Reflection.MetadataLoadContext@10.0.2?package-id=0fb5541564af10e9",
      "type": "library",
      "name": "System.Reflection.MetadataLoadContext",
      "version": "10.0.2",
      "cpe": "cpe:2.3:a:system_reflection_metadataloadcontext:system_reflection_metadataloadcontext_.net:10.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:nuget/System.Reflection.MetadataLoadContext@10.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dotnet-deps-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dotnet"
        },
        {
          "name": "syft:package:type",
          "value": "dotnet"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dotnet-deps-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:system_reflection_metadataloadcontext:system_reflection_metadataloadcontext:10.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/dosai/dosai"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/a3e9-website@1.0.0?package-id=e33d64f596a53860",
      "type": "library",
      "name": "a3e9-website",
      "version": "1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:a3e9-website:a3e9-website:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/a3e9-website@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:a3e9-website:a3e9_website:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:a3e9_website:a3e9-website:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:a3e9_website:a3e9_website:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:a3e9:a3e9-website:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:a3e9:a3e9_website:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:1f09f3658b874f3265950845cd7a55d39c59ee13ec0b7459c8967bed119eb26d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/abbrev@3.0.1?package-id=91873976094109ca",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "abbrev",
      "version": "3.0.1",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/abbrev@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/abbrev-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/abbrev@3.0.1/node_modules/abbrev/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/abbrev@3.0.1?package-id=79a9b69c1ab1f00e",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "abbrev",
      "version": "3.0.1",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/abbrev@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/abbrev-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/abbrev/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/abbrev@3.0.1?package-id=5ceff0a901303712",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "abbrev",
      "version": "3.0.1",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/abbrev@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/abbrev-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/abbrev/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/accepts@1.3.8?package-id=5802e193d3caaf87",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "accepts",
      "version": "1.3.8",
      "description": "Higher-level content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/accepts@1.3.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/accepts@1.3.8/node_modules/accepts/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/acorn@8.15.0?package-id=a776f5669ece4316",
      "type": "library",
      "author": "Marijn Haverbeke <marijnh@gmail.com>, Ingvar Stepanyan <me@rreverser.com>, Adrian Heine",
      "name": "acorn",
      "version": "8.15.0",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:acornjs:acorn:8.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/acorn@8.15.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:acorn:acorn:8.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/acorn@8.15.0/node_modules/acorn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/add@2.0.6?package-id=c33ff97b1be754c5",
      "type": "library",
      "author": "Ben Ng <me@benng.me>",
      "name": "add",
      "version": "2.0.6",
      "description": "A cross-browser, numerically stable algorithm to add floats accurately",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ben-ng:add:2.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/add@2.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/ben-ng/add.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ben-ng/add",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:add:add:2.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/add@2.0.6/node_modules/add/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/adduser@3.134?arch=all&distro=debian-12.15&package-id=c02171bf930643dd",
      "type": "library",
      "publisher": "Debian Adduser Developers <adduser@packages.debian.org>",
      "name": "adduser",
      "version": "3.134",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:adduser:adduser:3.134:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/adduser@3.134?arch=all&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/adduser/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/adduser.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/adduser.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/adduser.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/adduser.postrm"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/adduser.preinst"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "686"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/aes-js@4.0.0-beta.5?package-id=7282175db07cddc8",
      "type": "library",
      "author": "Richard Moore <me@ricmoo.com>",
      "name": "aes-js",
      "version": "4.0.0-beta.5",
      "description": "A pure JavaScript implementation of the AES block cipher and all common modes of operation.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/aes-js@4.0.0-beta.5",
      "externalReferences": [
        {
          "url": "git://github.com/ricmoo/aes-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/aes-js@4.0.0-beta.5/node_modules/aes-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=10a79b9db1ba25f5",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "agent-base",
      "version": "7.1.4",
      "description": "Turn a function into an `http.Agent` instance",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/agent-base@7.1.4/node_modules/agent-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=242e12e55c76d1a2",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "agent-base",
      "version": "7.1.4",
      "description": "Turn a function into an `http.Agent` instance",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/agent-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=ee8808d3b210993d",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "agent-base",
      "version": "7.1.4",
      "description": "Turn a function into an `http.Agent` instance",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/agent-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/agentkeepalive@4.6.0?package-id=70773e55483227f8",
      "type": "library",
      "author": "fengmk2 <fengmk2@gmail.com> (https://github.com/fengmk2)",
      "name": "agentkeepalive",
      "version": "4.6.0",
      "description": "Missing keepalive http.Agent",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/agentkeepalive@4.6.0",
      "externalReferences": [
        {
          "url": "git://github.com/node-modules/agentkeepalive.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/agentkeepalive@4.6.0/node_modules/agentkeepalive/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ajv@8.20.0?package-id=218be997f67b6965",
      "type": "library",
      "author": "Evgeny Poberezkin",
      "name": "ajv",
      "version": "8.20.0",
      "description": "Another JSON Schema Validator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ajv:ajv:8.20.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ajv@8.20.0",
      "externalReferences": [
        {
          "url": "https://ajv.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ajv-formats@3.0.1?package-id=b1556d28b574b79b",
      "type": "library",
      "author": "Evgeny Poberezkin",
      "name": "ajv-formats",
      "version": "3.0.1",
      "description": "Format validation for Ajv v7+",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ajv-validator:ajv-formats:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ajv-formats@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ajv-validator/ajv-formats.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ajv-validator/ajv-formats#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-validator:ajv_formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-formats:ajv-formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-formats:ajv_formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats:ajv-formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats:ajv_formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv:ajv-formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv:ajv_formats:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ajv-formats@3.0.1_ajv@8.20.0/node_modules/ajv-formats/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ajv-formats-draft2019@1.6.1?package-id=afd4841b812047e7",
      "type": "library",
      "author": "Carlo Quinonez <carlo@machina.bio>",
      "name": "ajv-formats-draft2019",
      "version": "1.6.1",
      "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ajv-formats-draft2019:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ajv-formats-draft2019@1.6.1",
      "externalReferences": [
        {
          "url": "https://github.com/luzlab/ajv-formats-draft2019.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-formats-draft2019:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats_draft2019:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats_draft2019:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-formats:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv-formats:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv_formats:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luzlab:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luzlab:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv:ajv-formats-draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajv:ajv_formats_draft2019:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ajv-formats-draft2019@1.6.1_ajv@8.20.0/node_modules/ajv-formats-draft2019/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=8ddbb2556edd0b46",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ansi-regex@5.0.1/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=8b96ac044d5d8277",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/string-width-cjs/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=68fbd9cc4abd0fda",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=ad9c203512fca260",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=be4d73e435400d4c",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=289d697e0e16fc10",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-regex",
      "version": "6.2.2",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=744ee40d20553e58",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-regex",
      "version": "6.2.2",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=ba2bc9713fb8a0d0",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-regex",
      "version": "6.2.2",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-regex@6.3.0?package-id=12acb45e2969cb53",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-regex",
      "version": "6.3.0",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.3.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ansi-regex@6.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ansi-regex@6.3.0/node_modules/ansi-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=85a53fc79c83a4f3",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ansi-styles@4.3.0/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=505d3be6c8489f05",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=8fdc75f728f116cb",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@6.2.3?package-id=a9905eb6d56c0fcc",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ansi-styles@6.2.3/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@6.2.3?package-id=c4ff5ab5d5566f1f",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ansi-styles@6.2.3?package-id=2fb84b983e303e1e",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ansi-styles/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?package-id=22cc4caa308cd62a",
      "type": "library",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "licenses": [
        {
          "license": {
            "name": "https://www.antlr.org/license.html"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.antlr.antlr4-runtime:antlr4-runtime:4.13.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.antlr.antlr4-runtime:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4-runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4-runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.antlr:antlr4-runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.antlr:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4-runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4-runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4_runtime:4.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.antlr.antlr4-runtime-4.13.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "antlr4-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.antlr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.antlr.antlr4-runtime-4.13.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/aproba@2.1.0?package-id=b8ae699cee9dd088",
      "type": "library",
      "author": "Rebecca Turner <me@re-becca.org>",
      "name": "aproba",
      "version": "2.1.0",
      "description": "A ridiculously light-weight argument validator (now browser friendly)",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:aproba:aproba:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/aproba@2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/iarna/aproba",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/aproba",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:aproba:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/aproba/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/apt@2.6.1?arch=amd64&distro=debian-12.15&package-id=cd0a6d87e2b9c130",
      "type": "library",
      "publisher": "APT Development Team <deity@lists.debian.org>",
      "name": "apt",
      "version": "2.6.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        }
      ],
      "cpe": "cpe:2.3:a:apt:apt:2.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/apt@2.6.1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:10:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:10:path",
          "value": "/var/lib/dpkg/info/apt.triggers"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/apt/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/apt.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/apt.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/apt.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/apt.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/apt.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/apt.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/apt.prerm"
        },
        {
          "name": "syft:location:9:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:9:path",
          "value": "/var/lib/dpkg/info/apt.shlibs"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "4232"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/archiver@5.3.2?package-id=0680ec43d0570df5",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "archiver",
      "version": "5.3.2",
      "description": "a streaming interface for archive generation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:archiverjs:archiver:5.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/archiver@5.3.2",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/node-archiver.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/node-archiver",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver:archiver:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/archiver@5.3.2/node_modules/archiver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/archiver-utils@2.1.0?package-id=62b6897ff2185ec4",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "archiver-utils",
      "version": "2.1.0",
      "description": "utility functions for archiver",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/archiver-utils@2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/archiver-utils.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/archiver-utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver-utils:archiver_utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver_utils:archiver-utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver_utils:archiver_utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:archiver-utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:archiver_utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver:archiver-utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver:archiver_utils:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/archiver-utils@2.1.0/node_modules/archiver-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/archiver-utils@3.0.4?package-id=7340432f4cdbbe3b",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "archiver-utils",
      "version": "3.0.4",
      "description": "utility functions for archiver",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/archiver-utils@3.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/archiver-utils.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/archiver-utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver-utils:archiver_utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver_utils:archiver-utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver_utils:archiver_utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:archiver-utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:archiver_utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver:archiver-utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiver:archiver_utils:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/archiver-utils@3.0.4/node_modules/archiver-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/archy@1.0.0?package-id=bb676c74822bc312",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "archy",
      "version": "1.0.0",
      "description": "render nested hierarchies `npm ls` style with unicode pipes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "url": "http://github.com/substack/node-archy.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archy:archy:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/archy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/argparse@2.0.1?package-id=a47a1e4c1e3a3cc6",
      "type": "library",
      "name": "argparse",
      "version": "2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:argparse:argparse:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/argparse@2.0.1/node_modules/argparse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/aria-hidden@1.2.6?package-id=bd7a86fac336db00",
      "type": "library",
      "author": "Anton Korzunov <thekashey@gmail.com>",
      "name": "aria-hidden",
      "version": "1.2.6",
      "description": "Cast aria-hidden to everything, except...",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:aria-hidden:aria-hidden:1.2.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/aria-hidden@1.2.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/theKashey/aria-hidden.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theKashey/aria-hidden#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aria-hidden:aria_hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aria_hidden:aria-hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aria_hidden:aria_hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:aria-hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:aria_hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aria:aria-hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aria:aria_hidden:1.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/aria-hidden@1.2.6/node_modules/aria-hidden/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=8be4dffd30aed630",
      "type": "library",
      "author": "Blake Embrey <hello@blakeembrey.com> (http://blakeembrey.me)",
      "name": "array-flatten",
      "version": "1.1.1",
      "description": "Flatten an array of nested arrays into a single flat array",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/blakeembrey/array-flatten.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/blakeembrey/array-flatten",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/array-flatten@1.1.1/node_modules/array-flatten/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.10.1?package-id=c5c8f0c5178e7692",
      "type": "library",
      "name": "asm",
      "version": "9.10.1",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.objectweb.asm:asm:9.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.objectweb.asm/asm@9.10.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-9.10.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-9.10.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.10.1?package-id=4684213e9a890e41",
      "type": "library",
      "name": "asm-analysis",
      "version": "9.10.1",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.objectweb.asm.tree.analysis:asm-analysis:9.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.10.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8d49f14d51f632cb1d87c88d1ceaf50db0d8af1b"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree.analysis:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree.analysis:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree.analysis:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree.analysis:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:analysis:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-analysis-9.10.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-analysis-9.10.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.9.1?package-id=8cf7dc0e42753bd4",
      "type": "library",
      "name": "asm-commons",
      "version": "9.9.1",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.objectweb.asm.commons:asm-commons:9.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.9.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ab35de4c537184a09339069f1a3b3aacf2289149"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.commons:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.commons:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.commons:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm-commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm-commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm-commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:commons:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-commons-9.9.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-commons-9.9.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.10.1?package-id=ade7eefa979d9a70",
      "type": "library",
      "name": "asm-tree",
      "version": "9.10.1",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.objectweb.asm.tree:asm-tree:9.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.10.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e244332a17564c1d1572449399a842de35881be2"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.tree:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm-tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm-tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-tree-9.10.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-tree-9.10.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.util/asm-util@9.10.1?package-id=4eacacd28321f757",
      "type": "library",
      "name": "asm-util",
      "version": "9.10.1",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.objectweb.asm.util:asm-util:9.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.objectweb.asm.util/asm-util@9.10.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7bb9d450e8d4cbf9f9e04096c44bbfe7fba80b15"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.util:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.util:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.objectweb.asm.util:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-util:asm-util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-util:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_util:asm-util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_util:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-util:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_util:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:asm-util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-util:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_util:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:util:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-util-9.10.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.ow2.asm.asm-util-9.10.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/assertion-error@2.0.1?package-id=59154c4c0f17c565",
      "type": "library",
      "author": "Jake Luer <jake@qualiancy.com> (http://qualiancy.com)",
      "name": "assertion-error",
      "version": "2.0.1",
      "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:assertion-error:assertion-error:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/assertion-error@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assertion-error:assertion_error:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assertion_error:assertion-error:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assertion_error:assertion_error:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assertion:assertion-error:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assertion:assertion_error:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/assertion-error@2.0.1/node_modules/assertion-error/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/async@3.2.6?package-id=987ac4f567ef7d29",
      "type": "library",
      "author": "Caolan McMahon",
      "name": "async",
      "version": "3.2.6",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/async@3.2.6",
      "externalReferences": [
        {
          "url": "https://github.com/caolan/async.git",
          "type": "distribution"
        },
        {
          "url": "https://caolan.github.io/async/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/async@3.2.6/node_modules/async/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=605bb5fdb67effe0",
      "type": "library",
      "author": "Alex Indigo <iam@alexindigo.com>",
      "name": "asynckit",
      "version": "0.4.0",
      "description": "Minimal async jobs utility library, with streams support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexindigo/asynckit.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/alexindigo/asynckit#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/asynckit@0.4.0/node_modules/asynckit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/atom@2.5.6?package-id=fe574b87deb96566",
      "type": "library",
      "name": "atom",
      "version": "2.5.6",
      "cpe": "cpe:2.3:a:io.appthreat:atom:2.5.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/atom@2.5.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "62d545072f8be0736d8615727baa79156481f4e3"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:atom:2.5.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:atom:atom:2.5.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.atom-2.5.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.atom-2.5.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/atom/atom@2.5.6-classpath?package-id=8a5ebcd44fe70b62",
      "type": "library",
      "name": "atom",
      "version": "2.5.6-classpath",
      "cpe": "cpe:2.3:a:atom:atom:2.5.6-classpath:*:*:*:*:*:*:*",
      "purl": "pkg:maven/atom/atom@2.5.6-classpath",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8eb6a03578ec81d75de7121211d2e2b85ccab24d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.atom-2.5.6-classpath.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.atom-2.5.6-classpath.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/autoprefixer@10.4.21?package-id=abbb54b799a021b4",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "autoprefixer",
      "version": "10.4.21",
      "description": "Parse CSS and add vendor prefixes to CSS rules using values from the Can I Use website",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:autoprefixer:autoprefixer:10.4.21:*:*:*:*:*:*:*",
      "purl": "pkg:npm/autoprefixer@10.4.21",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/autoprefixer@10.4.21_postcss@8.5.6/node_modules/autoprefixer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/autossh@1.4g-1%2Bb1?arch=amd64&distro=debian-12.15&package-id=553a99dcf3e6935b&upstream=autossh%401.4g-1",
      "type": "library",
      "publisher": "Axel Beckert <abe@debian.org>",
      "name": "autossh",
      "version": "1.4g-1+b1",
      "licenses": [
        {
          "license": {
            "id": "MirOS"
          }
        },
        {
          "license": {
            "name": "ISC-MirOS-Flavour"
          }
        },
        {
          "license": {
            "name": "ISC-OpenBSD-Flavour"
          }
        },
        {
          "license": {
            "name": "autossh"
          }
        }
      ],
      "cpe": "cpe:2.3:a:autossh:autossh:1.4g-1\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/autossh@1.4g-1%2Bb1?arch=amd64&distro=debian-12.15&upstream=autossh%401.4g-1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/autossh/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/autossh.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/autossh.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/autossh.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "92"
        },
        {
          "name": "syft:metadata:source",
          "value": "autossh"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.4g-1"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/axios@1.12.2?package-id=4a3289bcdea0ba34",
      "type": "library",
      "author": "Matt Zabriskie, Matt Zabriskie (https://github.com/mzabriskie), Dmitriy Mozgovoy (https://github.com/DigitalBrainJS), Nick Uraltsev (https://github.com/nickuraltsev), Jay (https://github.com/jasonsaayman), Emily Morehouse (https://github.com/emilyemorehouse), Rubén Norte (https://github.com/rubennorte), Justin Beckwith (https://github.com/JustinBeckwith), Martti Laine (https://github.com/codeclown), Xianming Zhong (https://github.com/chinesedfan), Remco Haszing (https://github.com/remcohaszing), Rikki Gibson (https://github.com/RikkiGibson), Willian Agostini (https://github.com/WillianAgostini), Yasu Flores (https://github.com/yasuf)",
      "name": "axios",
      "version": "1.12.2",
      "description": "Promise based HTTP client for the browser and node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:axios:axios:1.12.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/axios@1.12.2",
      "externalReferences": [
        {
          "url": "https://github.com/axios/axios.git",
          "type": "distribution"
        },
        {
          "url": "https://axios-http.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/axios@1.12.2/node_modules/axios/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.soot-oss/axml@2.1.4?package-id=6cecbc8706aaab1a",
      "type": "library",
      "group": "org.soot-oss",
      "name": "axml",
      "version": "2.1.4",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.soot-oss:axml:2.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.soot-oss/axml@2.1.4",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b53d9261d19554d8050fa36ecd1ddeed366cc98c"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot-oss:axml:2.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot_oss:axml:2.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:axml:axml:2.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot:axml:2.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.axml-2.1.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "axml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.soot-oss"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.axml-2.1.4.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bail@2.0.2?package-id=efc5e3a0880d0e70",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "bail",
      "version": "2.0.2",
      "description": "Throw a given error",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bail:bail:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bail@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bail@2.0.2/node_modules/bail/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=7624c200075d0be7",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/balanced-match@1.0.2/node_modules/balanced-match/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=67400b4421004414",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/balanced-match/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=12b833f038f53020",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/balanced-match@4.0.4?package-id=5626bbe4b42c4bf8",
      "type": "library",
      "name": "balanced-match",
      "version": "4.0.4",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:balanced-match:balanced-match:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/balanced-match@4.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced-match:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced_match:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:juliangruber:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced-match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:balanced:balanced_match:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/balanced-match@4.0.4/node_modules/balanced-match/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/base-files@12.4%2Bdeb12u15?arch=amd64&distro=debian-12.15&package-id=735e4e6d8efde23b",
      "type": "library",
      "publisher": "Santiago Vila <sanvila@debian.org>",
      "name": "base-files",
      "version": "12.4+deb12u15",
      "licenses": [
        {
          "license": {
            "name": "sha256:fd7e4aae7e7b05f217bcf2d02322825c360e66c52c4c2f1b28d784d6297a1c23"
          }
        }
      ],
      "cpe": "cpe:2.3:a:base-files:base-files:12.4\\+deb12u15:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/base-files@12.4%2Bdeb12u15?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-files:base_files:12.4\\+deb12u15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_files:base-files:12.4\\+deb12u15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_files:base_files:12.4\\+deb12u15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base-files:12.4\\+deb12u15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base_files:12.4\\+deb12u15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/base-files/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/base-files.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/base-files.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/base-files.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/base-files.postinst"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "341"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/base-passwd@3.6.1?arch=amd64&distro=debian-12.15&package-id=7cc4c7a70852c7fd",
      "type": "library",
      "publisher": "Colin Watson <cjwatson@debian.org>",
      "name": "base-passwd",
      "version": "3.6.1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/base-passwd@3.6.1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-passwd:base_passwd:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_passwd:base-passwd:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_passwd:base_passwd:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base-passwd:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base_passwd:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/base-passwd/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/base-passwd.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/base-passwd.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/base-passwd.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/base-passwd.postrm"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/base-passwd.preinst"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/base-passwd.templates"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "247"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/base-x@3.0.11?package-id=8929431a8ffa9a3e",
      "type": "library",
      "author": "Daniel Cousens",
      "name": "base-x",
      "version": "3.0.11",
      "description": "Fast base encoding / decoding of any given alphabet",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cryptocoinjs:base-x:3.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/base-x@3.0.11",
      "externalReferences": [
        {
          "url": "https://github.com/cryptocoinjs/base-x.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cryptocoinjs/base-x",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cryptocoinjs:base_x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-x:base-x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-x:base_x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_x:base-x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_x:base_x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base-x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base_x:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/base-x@3.0.11/node_modules/base-x/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/base-x@5.0.1?package-id=46db58e8ddb8c378",
      "type": "library",
      "author": "Daniel Cousens",
      "name": "base-x",
      "version": "5.0.1",
      "description": "Fast base encoding / decoding of any given alphabet",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cryptocoinjs:base-x:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/base-x@5.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/cryptocoinjs/base-x.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cryptocoinjs/base-x",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cryptocoinjs:base_x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-x:base-x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base-x:base_x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_x:base-x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base_x:base_x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base-x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base:base_x:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/base-x@5.0.1/node_modules/base-x/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/base64-arraybuffer@1.0.2?package-id=f6dfb573767c7d94",
      "type": "library",
      "author": "Niklas von Hertzen <niklasvh@gmail.com> (https://hertzen.com)",
      "name": "base64-arraybuffer",
      "version": "1.0.2",
      "description": "Encode/decode base64 data into ArrayBuffers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/base64-arraybuffer@1.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/niklasvh/base64-arraybuffer",
          "type": "distribution"
        },
        {
          "url": "https://github.com/niklasvh/base64-arraybuffer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:base64-arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:base64_arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64:base64-arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64:base64_arraybuffer:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/base64-arraybuffer@1.0.2/node_modules/base64-arraybuffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=3ccc05b35ea5cf57",
      "type": "library",
      "author": "T. Jameson Little <t.jameson.little@gmail.com>",
      "name": "base64-js",
      "version": "1.5.1",
      "description": "Base64 encoding/decoding in pure JS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/beatgammit/base64-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/beatgammit/base64-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/baseline-browser-mapping@2.8.13?package-id=c59d4fe1cbbaa62c",
      "type": "library",
      "name": "baseline-browser-mapping",
      "version": "2.8.13",
      "description": "A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:baseline-browser-mapping:baseline-browser-mapping:2.8.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/baseline-browser-mapping@2.8.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/web-platform-dx/baseline-browser-mapping.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline-browser-mapping:baseline_browser_mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline_browser_mapping:baseline-browser-mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline_browser_mapping:baseline_browser_mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline-browser:baseline-browser-mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline-browser:baseline_browser_mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline_browser:baseline-browser-mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline_browser:baseline_browser_mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline:baseline-browser-mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:baseline:baseline_browser_mapping:2.8.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/baseline-browser-mapping@2.8.13/node_modules/baseline-browser-mapping/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=amd64&distro=debian-12.15&package-id=f910b8efb61f91f7&upstream=bash%405.2.15-2",
      "type": "library",
      "publisher": "Matthias Klose <doko@debian.org>",
      "name": "bash",
      "version": "5.2.15-2+b13",
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause-UC"
          }
        },
        {
          "license": {
            "id": "GFDL-1.3-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GFDL-NIV-1.3"
          }
        },
        {
          "license": {
            "name": "MIT-like"
          }
        },
        {
          "license": {
            "name": "permissive"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bash:bash:5.2.15-2\\+b13:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=amd64&distro=debian-12.15&upstream=bash%405.2.15-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/bash/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/bash.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/bash.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/bash.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/bash.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/bash.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/bash.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "7164"
        },
        {
          "name": "syft:metadata:source",
          "value": "bash"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "5.2.15-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/beep-boop@1.2.3?package-id=e8ee5e11be208b46",
      "type": "library",
      "name": "beep-boop",
      "version": "1.2.3",
      "cpe": "cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/beep-boop@1.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/github-from-package@0.0.0/node_modules/github-from-package/example/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/benchmark@1.0.0?package-id=6647bfca280f5278",
      "type": "library",
      "name": "benchmark",
      "version": "1.0.0",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:benchmark:benchmark:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/benchmark@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/benchmark/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/better-files/better-files_3@3.9.2?package-id=12cd4ae5f07e6189",
      "type": "library",
      "name": "better-files_3",
      "version": "3.9.2",
      "cpe": "cpe:2.3:a:com.github.pathikrit:better-files-3:3.9.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/better-files/better-files_3@3.9.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2a5101fe2dd386a1a3bffa5d7a210b1a2d646871"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.pathikrit:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.pathikrit:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.pathikrit:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files-3:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files-3:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files-3:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files_3:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files_3:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files_3:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files_3:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files_3:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files_3:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files-3:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files_3:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files_3:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pathikrit:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pathikrit:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pathikrit:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better-files:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better_files:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:better-files-3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:better-files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:better_files_3:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pathikrit:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:better:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:pathikrit:3.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.pathikrit.better-files_3-3.9.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.pathikrit.better-files_3-3.9.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/big-integer@1.6.52?package-id=7e35a5019f1c96e5",
      "type": "library",
      "author": "Peter Olson <peter.e.c.olson+npm@gmail.com>",
      "name": "big-integer",
      "version": "1.6.52",
      "description": "An arbitrary length integer library for Javascript",
      "licenses": [
        {
          "license": {
            "id": "Unlicense"
          }
        }
      ],
      "cpe": "cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*",
      "purl": "pkg:npm/big-integer@1.6.52",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/big-integer@1.6.52/node_modules/big-integer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bigint-buffer@1.1.5?package-id=8adf7a782edd6739",
      "type": "library",
      "author": "Michael Wei <mwei@vmware.com> (https://github.com/no2chem)",
      "name": "bigint-buffer",
      "version": "1.1.5",
      "description": "bigint to buffer conversion with native support",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bigint-buffer:bigint-buffer:1.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bigint-buffer@1.1.5",
      "externalReferences": [
        {
          "url": "https://github.com/no2chem/bigint-buffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bigint-buffer:bigint_buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bigint_buffer:bigint-buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bigint_buffer:bigint_buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:no2chem:bigint-buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:no2chem:bigint_buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bigint:bigint-buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bigint:bigint_buffer:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bigint-buffer@1.1.5/node_modules/bigint-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bignumber.js@9.3.1?package-id=859a5b115a0807f4",
      "type": "library",
      "author": "Michael Mclaughlin <M8ch88l@gmail.com>",
      "name": "bignumber.js",
      "version": "9.3.1",
      "description": "A library for arbitrary-precision decimal and non-decimal arithmetic",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bignumber.js:bignumber.js:9.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bignumber.js@9.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/MikeMcl/bignumber.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:MikeMcl:bignumber.js:9.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bignumber.js@9.3.1/node_modules/bignumber.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bin-links@5.0.0?package-id=d1d5ddeaf3c56a4c",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "bin-links",
      "version": "5.0.0",
      "description": "JavaScript package binary linker",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bin-links:bin-links:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bin-links@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/bin-links.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin-links:bin_links:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin_links:bin-links:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin_links:bin_links:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin:bin-links:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bin:bin_links:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/bin-links/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/binary@0.3.0?package-id=07797ca17f112147",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "binary",
      "version": "0.3.0",
      "description": "Unpack multibyte binary values from buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/binary@0.3.0",
      "externalReferences": [
        {
          "url": "http://github.com/substack/node-binary.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/binary@0.3.0/node_modules/binary/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/binary-extensions@2.3.0?package-id=1426b6e1e2f52c63",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "binary-extensions",
      "version": "2.3.0",
      "description": "List of binary file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/binary-extensions@2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary-extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary_extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary_extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary:binary-extensions:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:binary:binary_extensions:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bindings@1.5.0?package-id=834b3fd6633c0fdf",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
      "name": "bindings",
      "version": "1.5.0",
      "description": "Helper module for loading your native module's .node file",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bindings@1.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/node-bindings.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TooTallNate/node-bindings",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bindings@1.5.0/node_modules/bindings/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bl@4.1.0?package-id=41ac03f3138edc7d",
      "type": "library",
      "author": "Rod Vagg <rod@vagg.org> (https://github.com/rvagg), Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina), Jarett Cruger <jcrugzz@gmail.com> (https://github.com/jcrugzz)",
      "name": "bl",
      "version": "4.1.0",
      "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bl@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/rvagg/bl.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/rvagg/bl",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bl@4.1.0/node_modules/bl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bluebird@3.4.7?package-id=1a08e9084f4078f7",
      "type": "library",
      "author": "Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)",
      "name": "bluebird",
      "version": "3.4.7",
      "description": "Full featured Promises/A+ implementation with exceptionally good performance",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.4.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bluebird@3.4.7",
      "externalReferences": [
        {
          "url": "git://github.com/petkaantonov/bluebird.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/petkaantonov/bluebird",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bluebird:bluebird:3.4.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bluebird@3.4.7/node_modules/bluebird/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bn.js@5.2.5?package-id=ae84c4736e1bff8a",
      "type": "library",
      "author": "Fedor Indutny <fedor@indutny.com>",
      "name": "bn.js",
      "version": "5.2.5",
      "description": "Big number implementation in pure javascript",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:indutny:bn.js:5.2.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bn.js@5.2.5",
      "externalReferences": [
        {
          "url": "https://github.com/indutny/bn.js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bn.js:bn.js:5.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bn.js@5.2.5/node_modules/bn.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/body-parser@1.20.3?package-id=4140d2fc338b5ee0",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "body-parser",
      "version": "1.20.3",
      "description": "Node.js body parsing middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openjsf:body-parser:1.20.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/body-parser@1.20.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/body-parser@1.20.3/node_modules/body-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/body-parser@2.3.0?package-id=477b5705558de336",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "body-parser",
      "version": "2.3.0",
      "description": "Node.js body parsing middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openjsf:body-parser:2.3.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/body-parser@2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/body-parser@2.3.0/node_modules/body-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/boolbase@1.0.0?package-id=32c96ec72829ace2",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "boolbase",
      "version": "1.0.0",
      "description": "two functions: One that returns true, one that returns false",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:boolbase:boolbase:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/fb55/boolbase",
          "type": "distribution"
        },
        {
          "url": "https://github.com/fb55/boolbase",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:boolbase:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/boolbase@1.0.0/node_modules/boolbase/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/borsh@0.7.0?package-id=df01106cac750b77",
      "type": "library",
      "author": "Near Inc",
      "name": "borsh",
      "version": "0.7.0",
      "description": "Binary Object Representation Serializer for Hashing",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:borsh:borsh:0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/borsh@0.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/near/borsh-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/near/borsh-js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:near:borsh:0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/borsh@0.7.0/node_modules/borsh/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/brace-expansion@1.1.18?package-id=37dfea4d217b04f8",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "brace-expansion",
      "version": "1.1.18",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:1.1.18:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@1.1.18",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/brace-expansion@1.1.18/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/brace-expansion@2.0.2?package-id=e91670bec73a5efb",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "brace-expansion",
      "version": "2.0.2",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:2.0.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/brace-expansion@2.0.2?package-id=3300180a58087e60",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "brace-expansion",
      "version": "2.0.2",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:2.0.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/brace-expansion@2.1.4?package-id=be2dabe49668bbc5",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "brace-expansion",
      "version": "2.1.4",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:2.1.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@2.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/brace-expansion@2.1.4/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/brace-expansion@5.0.9?package-id=8a2d6b2411ed463c",
      "type": "library",
      "name": "brace-expansion",
      "version": "5.0.9",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:brace-expansion:5.0.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/brace-expansion@5.0.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/juliangruber/brace-expansion.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/brace-expansion@5.0.9/node_modules/brace-expansion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/browserslist@4.26.3?package-id=f764cc3776233ed9",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "browserslist",
      "version": "4.26.3",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:browserslist_project:browserslist:4.26.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/browserslist@4.26.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/browserslist@4.26.3/node_modules/browserslist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bs58@4.0.1?package-id=eb60222e4ae8ece7",
      "type": "library",
      "name": "bs58",
      "version": "4.0.1",
      "description": "Base 58 encoding / decoding",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cryptocoinjs:bs58:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bs58@4.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/cryptocoinjs/bs58",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bs58:bs58:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bs58@4.0.1/node_modules/bs58/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bs58@6.0.0?package-id=88e5b695048ee4de",
      "type": "library",
      "name": "bs58",
      "version": "6.0.0",
      "description": "Base 58 encoding / decoding",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cryptocoinjs:bs58:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bs58@6.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/cryptocoinjs/bs58",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bs58:bs58:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bs58@6.0.0/node_modules/bs58/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/bsdutils@1%3A2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=f131145b816a43ee&upstream=util-linux%402.38.1-5%2Bdeb12u3",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "bsdutils",
      "version": "1:2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/bsdutils@1%3A2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux%402.38.1-5%2Bdeb12u3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/bsdutils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/bsdutils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/bsdutils.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "355"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "2.38.1-5+deb12u3"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/buffer@5.7.1?package-id=df6c2026046c6b2d",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>",
      "name": "buffer",
      "version": "5.7.1",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/buffer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/buffer@5.7.1/node_modules/buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/buffer@6.0.3?package-id=2082897651405609",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>",
      "name": "buffer",
      "version": "6.0.3",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/buffer@6.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/feross/buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/buffer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=a1cd638dd68bd704",
      "type": "library",
      "author": "Brian J. Brennan <brianloveswords@gmail.com>, Vladimir Kuznetsov",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "description": "A pure javascript CRC32 algorithm that plays nice with binary data",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "url": "git://github.com/brianloveswords/buffer-crc32.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/brianloveswords/buffer-crc32",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/buffer-crc32@0.2.13/node_modules/buffer-crc32/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=38a7e588de8660bf",
      "type": "library",
      "author": "https://github.com/sarosia",
      "name": "buffer-indexof-polyfill",
      "version": "1.0.2",
      "description": "This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/buffer-indexof-polyfill@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sarosia/buffer-indexof-polyfill.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sarosia/buffer-indexof-polyfill#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/buffer-indexof-polyfill@1.0.2/node_modules/buffer-indexof-polyfill/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/buffers@0.1.1?package-id=fe42a8c58f7af9b2",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "buffers",
      "version": "0.1.1",
      "description": "Treat a collection of Buffers as a single contiguous partially mutable Buffer.",
      "cpe": "cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/buffers@0.1.1",
      "externalReferences": [
        {
          "url": "http://github.com/substack/node-buffers.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/buffers@0.1.1/node_modules/buffers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bufferutil@4.1.0?package-id=cf9b44934cf0b6d6",
      "type": "library",
      "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
      "name": "bufferutil",
      "version": "4.1.0",
      "description": "WebSocket buffer utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bufferutil:bufferutil:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bufferutil@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/websockets/bufferutil",
          "type": "distribution"
        },
        {
          "url": "https://github.com/websockets/bufferutil",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:websockets:bufferutil:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bufferutil@4.1.0/node_modules/bufferutil/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/bytes@3.1.2?package-id=2025dfe9387c8813",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Jed Watson <jed.watson@me.com>, Théo FIDRY <theo.fidry@gmail.com>",
      "name": "bytes",
      "version": "3.1.2",
      "description": "Utility to parse a string bytes to bytes and vice-versa",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/bytes@3.1.2/node_modules/bytes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/c2cpg_3@2.5.24?package-id=a608b5654a02844a",
      "type": "library",
      "name": "c2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:c2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/c2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fcda4b71ab06b656623f3eaf4c13cdb24cf94921"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:c2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:c2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:c2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg-3:c2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg-3:c2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg_3:c2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg_3:c2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg:c2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:c2cpg:c2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.c2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.c2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cac@6.7.14?package-id=dabca977aa82e6ea",
      "type": "library",
      "author": "egoist <0x142857@gmail.com>",
      "name": "cac",
      "version": "6.7.14",
      "description": "Simple yet powerful framework for building command-line apps.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cac:cac:6.7.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cac@6.7.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cac@6.7.14/node_modules/cac/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cacache@19.0.1?package-id=da75e2988fdac353",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "cacache",
      "version": "19.0.1",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cacache@19.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cacache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cacache@19.0.1/node_modules/cacache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cacache@19.0.1?package-id=08e57b5a276f9c8b",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "cacache",
      "version": "19.0.1",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cacache@19.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cacache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/cacache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cacache@19.0.1?package-id=2e0cf5a236032d56",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "cacache",
      "version": "19.0.1",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cacache@19.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cacache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cacache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2?package-id=4d25491db46c9940",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/call-bound@1.0.4?package-id=dc7b3add931d9a9f",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "call-bound",
      "version": "1.0.4",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bound.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/call-bound#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/call-bound@1.0.4/node_modules/call-bound/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001748?package-id=16f3e00f58284625",
      "type": "library",
      "author": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info)",
      "name": "caniuse-lite",
      "version": "1.0.30001748",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:caniuse-lite:caniuse-lite:1.0.30001748:*:*:*:*:*:*:*",
      "purl": "pkg:npm/caniuse-lite@1.0.30001748",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caniuse-lite:caniuse_lite:1.0.30001748:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caniuse_lite:caniuse-lite:1.0.30001748:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caniuse_lite:caniuse_lite:1.0.30001748:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caniuse:caniuse-lite:1.0.30001748:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caniuse:caniuse_lite:1.0.30001748:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/caniuse-lite@1.0.30001748/node_modules/caniuse-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/canvg@3.0.11?package-id=411e90a998359cde",
      "type": "library",
      "author": "Gabe Lerner <gabelerner@gmail.com>, Brett Zamir, Dan Green (https://twitter.com/dangreen58)",
      "name": "canvg",
      "version": "3.0.11",
      "description": "JavaScript SVG parser and renderer on Canvas.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:canvg:canvg:3.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/canvg@3.0.11",
      "externalReferences": [
        {
          "url": "https://github.com/canvg/canvg",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/canvg@3.0.11/node_modules/canvg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.typelevel/cats-core_3@2.13.0?package-id=98d8f3fdeca4bbbb",
      "type": "library",
      "name": "cats-core_3",
      "version": "2.13.0",
      "cpe": "cpe:2.3:a:org.typelevel:cats-core-3:2.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.typelevel/cats-core_3@2.13.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cafcdb23af26a0b2de13a1b362ae33c72fafcd6a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core-3:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core-3:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core-3:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core_3:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core_3:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core_3:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core_3:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core_3:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core_3:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-core:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_core:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats-core-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats-core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats_core_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.cats-core_3-2.13.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.cats-core_3-2.13.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.typelevel/cats-kernel_3@2.13.0?package-id=ec72966bc4ef15f6",
      "type": "library",
      "name": "cats-kernel_3",
      "version": "2.13.0",
      "cpe": "cpe:2.3:a:cats-kernel-3:cats-kernel-3:2.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.typelevel/cats-kernel_3@2.13.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b54ec5e7b865852b84856f5781c7b8426d3a73a4"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel-3:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel-3:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel_3:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel_3:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel_3:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel_3:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel_3:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel_3:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats-kernel:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats_kernel:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats-kernel-3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats-kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cats:cats_kernel_3:2.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.cats-kernel_3-2.13.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.cats-kernel_3-2.13.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ccount@2.0.1?package-id=ff17d563b34f689d",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "ccount",
      "version": "2.0.1",
      "description": "Count how often a character (or substring) is used in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ccount:ccount:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ccount@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ccount@2.0.1/node_modules/ccount/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cel.dev/expr@v0.24.0?package-id=0119ca59fb7df87c",
      "type": "library",
      "name": "cel.dev/expr",
      "version": "v0.24.0",
      "purl": "pkg:golang/cel.dev/expr@v0.24.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cel.dev/expr@v0.24.0?package-id=b2b406543bfe4d48",
      "type": "library",
      "name": "cel.dev/expr",
      "version": "v0.24.0",
      "purl": "pkg:golang/cel.dev/expr@v0.24.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chai@5.3.3?package-id=2045a4424833abab",
      "type": "library",
      "author": "Jake Luer <jake@alogicalparadox.com>, Jake Luer <jake@alogicalparadox.com>, Domenic Denicola <domenic@domenicdenicola.com> (http://domenicdenicola.com), Veselin Todorov <hi@vesln.com>, John Firebaugh <john.firebaugh@gmail.com>",
      "name": "chai",
      "version": "5.3.3",
      "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chaijs:chai:5.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chai@5.3.3",
      "externalReferences": [
        {
          "url": "https://github.com/chaijs/chai",
          "type": "distribution"
        },
        {
          "url": "http://chaijs.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chai:chai:5.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chai@5.3.3/node_modules/chai/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chainsaw@0.1.0?package-id=e7169c1ce7cbd697",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "chainsaw",
      "version": "0.1.0",
      "description": "Build chainable fluent interfaces the easy way... with a freakin' chainsaw!",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chainsaw@0.1.0",
      "externalReferences": [
        {
          "url": "http://github.com/substack/node-chainsaw.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chainsaw@0.1.0/node_modules/chainsaw/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chalk@5.6.2?package-id=0d909896119a97d2",
      "type": "library",
      "name": "chalk",
      "version": "5.6.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chalk:chalk:5.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chalk@5.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chalk@5.6.2?package-id=146ca0b93853635f",
      "type": "library",
      "name": "chalk",
      "version": "5.6.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chalk:chalk:5.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chalk@5.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/chalk/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/character-entities@2.0.2?package-id=11ee3b3f7cdf0d0c",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "character-entities",
      "version": "2.0.2",
      "description": "Map of named character references",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:character-entities:character-entities:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/character-entities@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities:character_entities:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character-entities:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character_entities:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character-entities:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character_entities:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/character-entities@2.0.2/node_modules/character-entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/character-entities-html4@2.1.0?package-id=6de0585b2125e1d2",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "character-entities-html4",
      "version": "2.1.0",
      "description": "Map of named character references from HTML 4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:character-entities-html4:character-entities-html4:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/character-entities-html4@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities-html4:character_entities_html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities_html4:character-entities-html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities_html4:character_entities_html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities:character-entities-html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities:character_entities_html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character-entities-html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character_entities_html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character-entities-html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character_entities_html4:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/character-entities-html4@2.1.0/node_modules/character-entities-html4/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/character-entities-legacy@3.0.0?package-id=c0efa72a37ca2a61",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "character-entities-legacy",
      "version": "3.0.0",
      "description": "List of legacy HTML named character references that don’t need a trailing semicolon",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:character-entities-legacy:character-entities-legacy:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/character-entities-legacy@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities-legacy:character_entities_legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities_legacy:character-entities-legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities_legacy:character_entities_legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities:character-entities-legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-entities:character_entities_legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character-entities-legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_entities:character_entities_legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character-entities-legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character_entities_legacy:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/character-entities-legacy@3.0.0/node_modules/character-entities-legacy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/character-reference-invalid@2.0.1?package-id=e028601720892f9b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "character-reference-invalid",
      "version": "2.0.1",
      "description": "Map of invalid numeric character references to their replacements, according to HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:character-reference-invalid:character-reference-invalid:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/character-reference-invalid@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-reference-invalid:character_reference_invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_reference_invalid:character-reference-invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_reference_invalid:character_reference_invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-reference:character-reference-invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character-reference:character_reference_invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_reference:character-reference-invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character_reference:character_reference_invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character-reference-invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:character:character_reference_invalid:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/character-reference-invalid@2.0.1/node_modules/character-reference-invalid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/check-error@2.1.1?package-id=80b5b0216a002418",
      "type": "library",
      "author": "Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com), David Losert (https://github.com/davelosert), Keith Cirkel (https://github.com/keithamus), Miroslav Bajtoš (https://github.com/bajtos), Lucas Fernandes da Costa (https://github.com/lucasfcosta)",
      "name": "check-error",
      "version": "2.1.1",
      "description": "Error comparison and information related utility for node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:check-error:check-error:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/check-error@2.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/check-error.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:check-error:check_error:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:check_error:check-error:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:check_error:check_error:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:check:check-error:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:check:check_error:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/check-error@2.1.1/node_modules/check-error/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/checker-qual/checker-qual@3.55.1?package-id=59fb12628883a076",
      "type": "library",
      "name": "checker-qual",
      "version": "3.55.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:checker-qual:checker-qual:3.55.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/checker-qual/checker-qual@3.55.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3d40699936a66b2d4c1f759f2f1a0446c8cf64fc"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.checkerframework.checker-qual-3.55.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.checkerframework.checker-qual-3.55.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cheerio@1.2.0?package-id=45f6d968aab16cb3",
      "type": "library",
      "author": "Matt Mueller <mattmuelle@gmail.com>, Felix Boehm <me@feedic.com>",
      "name": "cheerio",
      "version": "1.2.0",
      "description": "The fast, flexible & elegant library for parsing and manipulating HTML and XML.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cheeriojs:cheerio:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cheerio@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/cheeriojs/cheerio.git",
          "type": "distribution"
        },
        {
          "url": "https://cheerio.js.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio:cheerio:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cheerio@1.2.0/node_modules/cheerio/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cheerio-select@2.1.0?package-id=bfa6b93b612cd356",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "cheerio-select",
      "version": "2.1.0",
      "description": "CSS selector engine supporting jQuery selectors",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cheerio-select:cheerio-select:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cheerio-select@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/cheeriojs/cheerio-select.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio-select:cheerio_select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio_select:cheerio-select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio_select:cheerio_select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheeriojs:cheerio-select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheeriojs:cheerio_select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio:cheerio-select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheerio:cheerio_select:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cheerio-select@2.1.0/node_modules/cheerio-select/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chevrotain@11.0.3?package-id=a288c988d48b5df7",
      "type": "library",
      "author": "Shahar Soel",
      "name": "chevrotain",
      "version": "11.0.3",
      "description": "Chevrotain is a high performance fault tolerant javascript parsing DSL for building recursive decent parsers",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:Chevrotain:chevrotain:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chevrotain@11.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/Chevrotain/chevrotain.git",
          "type": "distribution"
        },
        {
          "url": "https://chevrotain.io/docs/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain:chevrotain:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chevrotain@11.0.3/node_modules/chevrotain/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chevrotain-allstar@0.3.1?package-id=d2eab08a5aca384c",
      "type": "library",
      "author": "TypeFox (https://www.typefox.io)",
      "name": "chevrotain-allstar",
      "version": "0.3.1",
      "description": "LL(*) lookahead strategy for the Chevrotain parser library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chevrotain-allstar:chevrotain-allstar:0.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chevrotain-allstar@0.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/langium/chevrotain-allstar",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain-allstar:chevrotain_allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain_allstar:chevrotain-allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain_allstar:chevrotain_allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain:chevrotain-allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chevrotain:chevrotain_allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langium:chevrotain-allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langium:chevrotain_allstar:0.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chevrotain-allstar@0.3.1_chevrotain@11.0.3/node_modules/chevrotain-allstar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chownr@1.1.4?package-id=10a660b8d4d642d2",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "chownr",
      "version": "1.1.4",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chownr@1.1.4/node_modules/chownr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chownr@3.0.0?package-id=f0369b6201e28ca2",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "chownr",
      "version": "3.0.0",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chownr@3.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/chownr@3.0.0/node_modules/chownr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chownr@3.0.0?package-id=e286d6c8adb51c17",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "chownr",
      "version": "3.0.0",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chownr@3.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/chownr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/chownr@3.0.0?package-id=b3b27bdd6ece697b",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "chownr",
      "version": "3.0.0",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/chownr@3.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/chownr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ci-info@4.4.0?package-id=cfb579d810f69b8d",
      "type": "library",
      "author": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son), Sibiraj (https://github.com/sibiraj-s)",
      "name": "ci-info",
      "version": "4.4.0",
      "description": "Get details about the current Continuous Integration environment",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ci-info:ci-info:4.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ci-info@4.4.0",
      "externalReferences": [
        {
          "url": "https://github.com/watson/ci-info",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci-info:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci_info:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci_info:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:watson:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:watson:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci:ci-info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ci:ci_info:4.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ci-info/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cidr-regex@4.1.3?package-id=826ecbef20de052d",
      "type": "library",
      "author": "silverwind <me@silverwind.io>, Felipe Apostol <flipjs.io@gmail.com> (http://flipjs.io/)",
      "name": "cidr-regex",
      "version": "4.1.3",
      "description": "Regular expression for matching IP addresses in CIDR notation",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:4.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cidr-regex@4.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr-regex:cidr_regex:4.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr_regex:cidr-regex:4.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr_regex:cidr_regex:4.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr:cidr-regex:4.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cidr:cidr_regex:4.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.circe/circe-core_3@0.14.15?package-id=d4a856e6c6c4ab0b",
      "type": "library",
      "name": "circe-core_3",
      "version": "0.14.15",
      "cpe": "cpe:2.3:a:circe-core-3:circe-core-3:0.14.15:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.circe/circe-core_3@0.14.15",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "419f36ad18d898db4f9099b7c3b848cf4a70ee91"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core-3:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core-3:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core_3:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core_3:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core_3:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core_3:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core_3:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core_3:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-core:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_core:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-core-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe_core_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-core_3-0.14.15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-core_3-0.14.15.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.circe/circe-generic_3@0.14.15?package-id=cddbe340dab2b53e",
      "type": "library",
      "name": "circe-generic_3",
      "version": "0.14.15",
      "cpe": "cpe:2.3:a:circe-generic-3:circe-generic-3:0.14.15:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.circe/circe-generic_3@0.14.15",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "092598c81053ab0513e77cc28c2091996be06c72"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic-3:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic-3:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic_3:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic_3:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic_3:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic_3:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic_3:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic_3:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-generic:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_generic:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-generic-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe_generic_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-generic_3-0.14.15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-generic_3-0.14.15.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.circe/circe-jawn_3@0.14.15?package-id=7f20479e7f61902a",
      "type": "library",
      "name": "circe-jawn_3",
      "version": "0.14.15",
      "cpe": "cpe:2.3:a:circe-jawn-3:circe-jawn-3:0.14.15:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.circe/circe-jawn_3@0.14.15",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1a63c86e8b25de92c23f74c9cb242187d1ebbb92"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn-3:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn-3:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn_3:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn_3:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn_3:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn_3:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn_3:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn_3:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-jawn:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_jawn:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-jawn-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe_jawn_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-jawn_3-0.14.15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-jawn_3-0.14.15.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.circe/circe-numbers_3@0.14.15?package-id=b271564636aef360",
      "type": "library",
      "name": "circe-numbers_3",
      "version": "0.14.15",
      "cpe": "cpe:2.3:a:circe-numbers-3:circe-numbers-3:0.14.15:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.circe/circe-numbers_3@0.14.15",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "159ad7a660d6d870499573689751413e9b6abcc8"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers-3:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers-3:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers_3:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers_3:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers_3:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers_3:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers_3:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers_3:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-numbers:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_numbers:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-numbers-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe_numbers_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-numbers_3-0.14.15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-numbers_3-0.14.15.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.circe/circe-parser_3@0.14.15?package-id=09362b6a21325425",
      "type": "library",
      "name": "circe-parser_3",
      "version": "0.14.15",
      "cpe": "cpe:2.3:a:circe-parser-3:circe-parser-3:0.14.15:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.circe/circe-parser_3@0.14.15",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3af99f3d58a59482ec4069cf2d7ed549eaa3ffcf"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser-3:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser-3:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser_3:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser_3:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser_3:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser_3:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser_3:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser_3:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe-parser:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe_parser:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.circe:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-parser-3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe-parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:circe:circe_parser_3:0.14.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-parser_3-0.14.15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.circe.circe-parser_3-0.14.15.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/class-variance-authority@0.7.1?package-id=559bb888984045c0",
      "type": "library",
      "author": "Joe Bell (https://joebell.co.uk)",
      "name": "class-variance-authority",
      "version": "0.7.1",
      "description": "Class Variance Authority 🧬",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:class-variance-authority:class-variance-authority:0.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/class-variance-authority@0.7.1",
      "externalReferences": [
        {
          "url": "https://github.com/joe-bell/cva.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/joe-bell/cva#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class-variance-authority:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class_variance_authority:class-variance-authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class_variance_authority:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class-variance:class-variance-authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class-variance:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class_variance:class-variance-authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class_variance:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joe-bell:class-variance-authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joe-bell:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class:class-variance-authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:class:class_variance_authority:0.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/class-variance-authority@0.7.1/node_modules/class-variance-authority/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=6d54c95d89792908",
      "type": "library",
      "author": "Shannon Moeller <me@shannonmoeller> (http://shannonmoeller.com)",
      "name": "cli-columns",
      "version": "4.0.0",
      "description": "Columnated lists for the CLI.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cli-columns@4.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/shannonmoeller/cli-columns#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shannonmoeller:cli_columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli-columns:cli-columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli-columns:cli_columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli_columns:cli-columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli_columns:cli_columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli:cli-columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cli:cli_columns:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cli-columns/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cliui@8.0.1?package-id=a6fa7540e36e2ac8",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "cliui",
      "version": "8.0.1",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cliui:cliui:8.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cliui@8.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cliui@8.0.1/node_modules/cliui/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cliui@9.0.1?package-id=d6a3085597a84635",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "cliui",
      "version": "9.0.1",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cliui:cliui:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cliui@9.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cliui@9.0.1/node_modules/cliui/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go@v0.121.6?package-id=971c4f07869d0edd",
      "type": "library",
      "name": "cloud.google.com/go",
      "version": "v0.121.6",
      "purl": "pkg:golang/cloud.google.com/go@v0.121.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:waZiuajrI28iAf40cWgycWNgaXPO06dupuS+sgibK6c="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go@v0.121.6?package-id=a70214b0b9580ff3",
      "type": "library",
      "name": "cloud.google.com/go",
      "version": "v0.121.6",
      "purl": "pkg:golang/cloud.google.com/go@v0.121.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:waZiuajrI28iAf40cWgycWNgaXPO06dupuS+sgibK6c="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.17.0?package-id=9f6cd60f2c56688f",
      "type": "library",
      "name": "cloud.google.com/go/auth",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:go:auth:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:74yCm7hCj2rUyyAocqnFzsAYXgJhrG26XCFimrc/Kz4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.17.0?package-id=9b699a2a1249de39",
      "type": "library",
      "name": "cloud.google.com/go/auth",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:go:auth:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:74yCm7hCj2rUyyAocqnFzsAYXgJhrG26XCFimrc/Kz4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=0252202b2ae0c589",
      "type": "library",
      "name": "cloud.google.com/go/auth/oauth2adapt",
      "version": "v0.2.8",
      "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=cb06e0d8c94a6b17",
      "type": "library",
      "name": "cloud.google.com/go/auth/oauth2adapt",
      "version": "v0.2.8",
      "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=e71dcdd441b87bb9",
      "type": "library",
      "name": "cloud.google.com/go/compute/metadata",
      "version": "v0.9.0",
      "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=7994d30a9f93296e",
      "type": "library",
      "name": "cloud.google.com/go/compute/metadata",
      "version": "v0.9.0",
      "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.5.3?package-id=e1d3a2789c879bf1",
      "type": "library",
      "name": "cloud.google.com/go/iam",
      "version": "v1.5.3",
      "cpe": "cpe:2.3:a:go:iam:v1.5.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/iam@v1.5.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.5.3?package-id=54aedc2ec6ae8ee3",
      "type": "library",
      "name": "cloud.google.com/go/iam",
      "version": "v1.5.3",
      "cpe": "cpe:2.3:a:go:iam:v1.5.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/iam@v1.5.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.24.2?package-id=e8f310597c0973d4",
      "type": "library",
      "name": "cloud.google.com/go/monitoring",
      "version": "v1.24.2",
      "cpe": "cpe:2.3:a:go:monitoring:v1.24.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.24.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5OTsoJ1dXYIiMiuL+sYscLc9BumrL3CarVLL7dd7lHM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.24.2?package-id=e26b94ae7b32fa3a",
      "type": "library",
      "name": "cloud.google.com/go/monitoring",
      "version": "v1.24.2",
      "cpe": "cpe:2.3:a:go:monitoring:v1.24.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.24.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5OTsoJ1dXYIiMiuL+sYscLc9BumrL3CarVLL7dd7lHM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.56.0?package-id=cca19764cf250e51",
      "type": "library",
      "name": "cloud.google.com/go/storage",
      "version": "v1.56.0",
      "cpe": "cpe:2.3:a:go:storage:v1.56.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/storage@v1.56.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iixmq2Fse2tqxMbWhLWC9HfBj1qdxqAmiK8/eqtsLxI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.56.0?package-id=e90f39fb3a641a18",
      "type": "library",
      "name": "cloud.google.com/go/storage",
      "version": "v1.56.0",
      "cpe": "cpe:2.3:a:go:storage:v1.56.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/storage@v1.56.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iixmq2Fse2tqxMbWhLWC9HfBj1qdxqAmiK8/eqtsLxI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/clsx@2.1.1?package-id=e81e56e15fdbe53f",
      "type": "library",
      "author": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)",
      "name": "clsx",
      "version": "2.1.1",
      "description": "A tiny (239B) utility for constructing className strings conditionally.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:clsx:clsx:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/clsx@2.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/clsx@2.1.1/node_modules/clsx/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cmd-shim@7.0.0?package-id=92d53093a2ce11d8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "cmd-shim",
      "version": "7.0.0",
      "description": "Used in npm for command line application support",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cmd-shim@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cmd-shim.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd-shim:cmd_shim:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd_shim:cmd-shim:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd_shim:cmd_shim:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd-shim:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd_shim:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cmdk@1.1.1?package-id=92d556991da04cba",
      "type": "library",
      "author": "Paco (https://github.com/pacocoursey)",
      "name": "cmdk",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pacocoursey:cmdk:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cmdk@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pacocoursey/cmdk.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pacocoursey/cmdk#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmdk:cmdk:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cmdk@1.1.1_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@19.2.1_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/cmdk/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=f934aa55e1afae1d",
      "type": "library",
      "author": "Heather Arthur <fayearthur@gmail.com>",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/color-convert@2.0.1/node_modules/color-convert/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=375a01f7a3c50c9b",
      "type": "library",
      "author": "Heather Arthur <fayearthur@gmail.com>",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/color-convert/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=862c27e8e5d45025",
      "type": "library",
      "author": "Heather Arthur <fayearthur@gmail.com>",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/color-convert/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-name@1.1.4?package-id=a0bf6c585bcbf327",
      "type": "library",
      "author": "DY <dfcreative@gmail.com>",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/colorjs/color-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/color-name@1.1.4/node_modules/color-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-name@1.1.4?package-id=3416398af252659b",
      "type": "library",
      "author": "DY <dfcreative@gmail.com>",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/colorjs/color-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/color-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/color-name@1.1.4?package-id=bb1bf59f198c78dc",
      "type": "library",
      "author": "DY <dfcreative@gmail.com>",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/colorjs/color-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/color-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=a0f5956553395303",
      "type": "library",
      "author": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)",
      "name": "combined-stream",
      "version": "1.0.8",
      "description": "A stream that emits multiple other streams one after another.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-combined-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/felixge/node-combined-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:combined-stream:combined_stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:combined_stream:combined-stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:combined_stream:combined_stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:combined:combined-stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:combined:combined_stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:felixge:combined-stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:felixge:combined_stream:1.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/combined-stream@1.0.8/node_modules/combined-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/comma-separated-tokens@2.0.3?package-id=10971907d843b211",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "comma-separated-tokens",
      "version": "2.0.3",
      "description": "Parse and stringify comma-separated tokens",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:comma-separated-tokens:comma-separated-tokens:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/comma-separated-tokens@2.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma-separated-tokens:comma_separated_tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma_separated_tokens:comma-separated-tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma_separated_tokens:comma_separated_tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma-separated:comma-separated-tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma-separated:comma_separated_tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma_separated:comma-separated-tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma_separated:comma_separated_tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma:comma-separated-tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:comma:comma_separated_tokens:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/comma-separated-tokens@2.0.3/node_modules/comma-separated-tokens/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/commander@12.1.0?package-id=2910cb2424f451ab",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>",
      "name": "commander",
      "version": "12.1.0",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:commander:commander:12.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/commander@12.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tj/commander.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/commander@12.1.0/node_modules/commander/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/commander@14.0.3?package-id=256b725c0373fbf0",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>",
      "name": "commander",
      "version": "14.0.3",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:commander:commander:14.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/commander@14.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/tj/commander.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/commander@14.0.3/node_modules/commander/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/commander@2.20.3?package-id=bd8b27b54b72cf77",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>",
      "name": "commander",
      "version": "2.20.3",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "url": "https://github.com/tj/commander.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/commander@2.20.3/node_modules/commander/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/commander@7.2.0?package-id=aef769efd9d22669",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>",
      "name": "commander",
      "version": "7.2.0",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:commander:commander:7.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/commander@7.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/tj/commander.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tj:commander:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/commander@7.2.0/node_modules/commander/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/commander@8.3.0?package-id=a6d832d06246918e",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>",
      "name": "commander",
      "version": "8.3.0",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:commander:commander:8.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/commander@8.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/tj/commander.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tj:commander:8.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/commander@8.3.0/node_modules/commander/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=6e3045dcab2d8e96",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "common-ancestor-path",
      "version": "1.0.1",
      "description": "Find the common ancestor of 2 or more paths on Windows or Unix",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/common-ancestor-path@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/common-ancestor-path",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor-path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/common-ancestor-path@1.0.1/node_modules/common-ancestor-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=b27c5282c62aaea6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "common-ancestor-path",
      "version": "1.0.1",
      "description": "Find the common ancestor of 2 or more paths on Windows or Unix",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/common-ancestor-path@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/common-ancestor-path",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor-path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor_path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-ancestor-path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_ancestor_path:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?package-id=cf16208a2218b04e",
      "type": "library",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:apache:commons-io:2.22.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/commons-io/commons-io@2.22.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.22.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.22.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/commons-io.commons-io-2.22.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/commons-io.commons-io-2.22.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-sbt/compiler-interface@1.9.6?package-id=086f912c5d99ed25",
      "type": "library",
      "name": "compiler-interface",
      "version": "1.9.6",
      "cpe": "cpe:2.3:a:compiler-interface:compiler-interface:1.9.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-sbt/compiler-interface@1.9.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3b8871d17259e8c94f3c0e33d033764ecb9344b8"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compiler-interface:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compiler_interface:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compiler_interface:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-sbt:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-sbt:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-sbt:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-sbt:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_sbt:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_sbt:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compiler:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compiler:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:compiler-interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:compiler_interface:1.9.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-sbt.compiler-interface-1.9.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-sbt.compiler-interface-1.9.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/compress-commons@4.1.2?package-id=8f058c390a87d42a",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "compress-commons",
      "version": "4.1.2",
      "description": "a library that defines a common interface for working with archive formats within node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:compress-commons:compress-commons:4.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/compress-commons@4.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/node-compress-commons.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/node-compress-commons",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress-commons:compress_commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_commons:compress-commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_commons:compress_commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:compress-commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:compress_commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress-commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress_commons:4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/compress-commons@4.1.2/node_modules/compress-commons/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/compressible@2.0.18?package-id=f6422970e206afe0",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)",
      "name": "compressible",
      "version": "2.0.18",
      "description": "Compressible Content-Type / mime checking",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*",
      "purl": "pkg:npm/compressible@2.0.18",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/compressible@2.0.18/node_modules/compressible/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/compression@1.8.1?package-id=c30ebfdc7ef31de2",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "compression",
      "version": "1.8.1",
      "description": "Node.js compression middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/compression@1.8.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/compression@1.8.1/node_modules/compression/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=d852566eb9757bf7",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-concat-map.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/concat-map@0.0.1/node_modules/concat-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/confbox@0.1.8?package-id=049db93ed5323407",
      "type": "library",
      "name": "confbox",
      "version": "0.1.8",
      "description": "Compact and high quality YAML, TOML, JSONC and JSON5 parsers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:confbox:confbox:0.1.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/confbox@0.1.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/confbox@0.1.8/node_modules/confbox/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/confbox@0.2.2?package-id=b85540539cda4111",
      "type": "library",
      "name": "confbox",
      "version": "0.2.2",
      "description": "Compact YAML, TOML, JSONC, JSON5 and INI parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:confbox:confbox:0.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/confbox@0.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/confbox@0.2.2/node_modules/confbox/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.typesafe/config@1.4.9?package-id=81cb2c7f621edc85",
      "type": "library",
      "name": "config",
      "version": "1.4.9",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0;description=Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.typesafe.config:config:1.4.9:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.typesafe/config@1.4.9",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fc87584fea1adcf5df899e58501a470329e59b52"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.typesafe:config:1.4.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:config:1.4.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config:1.4.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.typesafe.config-1.4.9.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.typesafe.config-1.4.9.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/connect@3.7.0?package-id=2670244f4d89a900",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com>, Tim Caswell <tim@creationix.com>",
      "name": "connect",
      "version": "3.7.0",
      "description": "High performance middleware framework",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sencha:connect:3.7.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/connect@3.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/connect@3.7.0/node_modules/connect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/content-disposition@0.5.4?package-id=942b086302b588f9",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "content-disposition",
      "version": "0.5.4",
      "description": "Create and parse Content-Disposition header",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/content-disposition@0.5.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/content-disposition@0.5.4/node_modules/content-disposition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/content-type@1.0.5?package-id=3457d221418541cf",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "content-type",
      "version": "1.0.5",
      "description": "Create and parse HTTP Content-Type header",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/content-type@1.0.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/content-type@1.0.5/node_modules/content-type/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/content-type@2.1.0?package-id=e11675e7f17a3325",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "content-type",
      "version": "2.1.0",
      "description": "Create and parse HTTP Content-Type header",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:content-type:content-type:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/content-type@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content-type:content_type:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_type:content-type:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content_type:content_type:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content-type:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:content:content_type:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/content-type@2.1.0/node_modules/content-type/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/convert-source-map@2.0.0?package-id=618e9546754244f6",
      "type": "library",
      "author": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)",
      "name": "convert-source-map",
      "version": "2.0.0",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:convert-source-map:convert-source-map:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/convert-source-map.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert-source-map:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert_source_map:convert-source-map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert_source_map:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert-source:convert-source-map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert-source:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert_source:convert-source-map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert_source:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thlorenz:convert-source-map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thlorenz:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:convert-source-map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:convert_source_map:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/convert-source-map@2.0.0/node_modules/convert-source-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cookie@0.7.1?package-id=1a0afc3ccd4991c6",
      "type": "library",
      "author": "Roman Shtylman <shtylman@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "cookie",
      "version": "0.7.1",
      "description": "HTTP server cookie parsing and serialization",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cookie:cookie:0.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cookie@0.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cookie@0.7.1/node_modules/cookie/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=12c09ab22afd747e",
      "type": "library",
      "author": "TJ Holowaychuk <tj@learnboost.com>",
      "name": "cookie-signature",
      "version": "1.0.6",
      "description": "Sign and unsign cookies",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/visionmedia/node-cookie-signature.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cookie-signature@1.0.6/node_modules/cookie-signature/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/net.sf.trove4j.core%2Cgnu.trove/core@3.1.0?package-id=79fc340ffec0be66",
      "type": "library",
      "name": "core",
      "version": "3.1.0",
      "licenses": [
        {
          "license": {
            "name": "http://www.gnu.org/licenses/lgpl-2.1.html"
          }
        }
      ],
      "cpe": "cpe:2.3:a:net.sf.trove4j.core\\,gnu.trove:core\\,gnu:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/net.sf.trove4j.core%2Cgnu.trove/core@3.1.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fd0207b685536b29dd65c86f4b3bf89befb885c"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:net.sf.trove4j.core\\,gnu.trove:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:net.sf.trove4j.core\\,gnu.trove:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:net.sf.trove4j.core\\,gnu.trove:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core\\,gnu:core\\,gnu:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core\\,gnu:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove4j:core\\,gnu:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove4j:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core\\,gnu:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove:core\\,gnu:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core\\,gnu:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core\\,gnu:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove4j:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove4j:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:core\\,gnu:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:trove4j:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trove:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:trove:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.sf.trove4j.core-3.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.sf.trove4j.core-3.1.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/core-js@3.50.0?package-id=f6bc68ec5538e0b9",
      "type": "library",
      "author": "Denis Pushkarev <zloirock@zloirock.ru> (http://zloirock.ru)",
      "name": "core-js",
      "version": "3.50.0",
      "description": "Standard library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:core-js:core-js:3.50.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/core-js@3.50.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/zloirock/core-js.git",
          "type": "distribution"
        },
        {
          "url": "https://core-js.io",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core-js:core_js:3.50.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_js:core-js:3.50.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_js:core_js:3.50.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core-js:3.50.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core_js:3.50.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/core-js@3.50.0/node_modules/core-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/core-util-is@1.0.3?package-id=d2f100e6ba8c49f7",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "core-util-is",
      "version": "1.0.3",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/core-util-is",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core-util:core-util-is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core-util:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_util:core-util-is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core_util:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:core-util-is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core-util-is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core_util_is:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/core-util-is@1.0.3/node_modules/core-util-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/corepack@0.34.6?package-id=41a4fda870d234da",
      "type": "library",
      "name": "corepack",
      "version": "0.34.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:corepack:corepack:0.34.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/corepack@0.34.6",
      "externalReferences": [
        {
          "url": "https://github.com/nodejs/corepack.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/nodejs/corepack#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:corepack:0.34.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/corepack/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/coreutils@9.1-1?arch=amd64&distro=debian-12.15&package-id=eca37691b87c0860",
      "type": "library",
      "publisher": "Michael Stone <mstone@debian.org>",
      "name": "coreutils",
      "version": "9.1-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause-UC"
          }
        },
        {
          "license": {
            "id": "FSFULLR"
          }
        },
        {
          "license": {
            "id": "GFDL-1.3-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "name": "GFDL-NIV-1.3"
          }
        }
      ],
      "cpe": "cpe:2.3:a:coreutils:coreutils:9.1-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/coreutils@9.1-1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/coreutils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/coreutils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/coreutils.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/coreutils.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/coreutils.postrm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "18062"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cose-base@1.0.3?package-id=926d423245d7107c",
      "type": "library",
      "name": "cose-base",
      "version": "1.0.3",
      "description": "Core module for compound spring embedder based layout styles",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iVis-at-Bilkent:cose-base:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cose-base@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/iVis-at-Bilkent/cose-base.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iVis-at-Bilkent/cose-base#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:cose_base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose-base:cose-base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose-base:cose_base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose_base:cose-base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose_base:cose_base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose:cose-base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose:cose_base:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cose-base@1.0.3/node_modules/cose-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cose-base@2.2.0?package-id=3287ca556b5ebe48",
      "type": "library",
      "name": "cose-base",
      "version": "2.2.0",
      "description": "Core module for compound spring embedder based layout styles",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iVis-at-Bilkent:cose-base:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cose-base@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/iVis-at-Bilkent/cose-base.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iVis-at-Bilkent/cose-base#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:cose_base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose-base:cose-base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose-base:cose_base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose_base:cose-base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose_base:cose_base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose:cose-base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cose:cose_base:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cose-base@2.2.0/node_modules/cose-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/cpg2-domain-classes_3@2.1.6?package-id=5b1b3df1e4e410a7",
      "type": "library",
      "name": "cpg2-domain-classes_3",
      "version": "2.1.6",
      "cpe": "cpe:2.3:a:cpg2-domain-classes-3:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/cpg2-domain-classes_3@2.1.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "857a7e273319c6a33547fbafec9be87a2083f131"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes-3:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes-3:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes_3:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes_3:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes_3:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes_3:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes_3:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes_3:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain-classes:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain_classes:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-domain:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_domain:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2-domain-classes-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2-domain-classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2_domain_classes_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2-domain-classes_3-2.1.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2-domain-classes_3-2.1.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/cpg2-protos_3@2.1.6?package-id=535144219ce6d227",
      "type": "library",
      "name": "cpg2-protos_3",
      "version": "2.1.6",
      "cpe": "cpe:2.3:a:cpg2-protos-3:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/cpg2-protos_3@2.1.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "44aac50d754ae2ac55533e3c5fc0a6d0916c3c5d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos-3:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos-3:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos_3:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos_3:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos_3:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos_3:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos_3:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos_3:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-protos:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_protos:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2-protos-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2-protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2_protos_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2-protos_3-2.1.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2-protos_3-2.1.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/cpg2_3@2.1.6?package-id=64e892917760321f",
      "type": "library",
      "name": "cpg2_3",
      "version": "2.1.6",
      "cpe": "cpe:2.3:a:io.appthreat:cpg2-3:2.1.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/cpg2_3@2.1.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96de885a1933b5d07738294028d16284b061e14e"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:cpg2_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:cpg2_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-3:cpg2-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2-3:cpg2_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_3:cpg2-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2_3:cpg2_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2-3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cpg2:cpg2_3:2.1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2_3-2.1.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.cpg2_3-2.1.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/crc-32@1.2.2?package-id=4668293da77346e5",
      "type": "library",
      "author": "sheetjs",
      "name": "crc-32",
      "version": "1.2.2",
      "description": "Pure-JS CRC-32",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:SheetJS:crc-32:1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/crc-32@1.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/SheetJS/js-crc32.git",
          "type": "distribution"
        },
        {
          "url": "https://sheetjs.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SheetJS:crc_32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc-32:crc-32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc-32:crc_32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc_32:crc-32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc_32:crc_32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc:crc-32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc:crc_32:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/crc-32@1.2.2/node_modules/crc-32/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/crc32-stream@4.0.3?package-id=2ab1855e36a6ddf9",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "crc32-stream",
      "version": "4.0.3",
      "description": "a streaming CRC32 checksumer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:crc32-stream:crc32-stream:4.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/crc32-stream@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/node-crc32-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/node-crc32-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc32-stream:crc32_stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc32_stream:crc32-stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc32_stream:crc32_stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:crc32-stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:crc32_stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc32:crc32-stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crc32:crc32_stream:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/crc32-stream@4.0.3/node_modules/crc32-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cross-spawn@7.0.6?package-id=624609f08e49967f",
      "type": "library",
      "author": "André Cruz <andre@moxy.studio>",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/moxystudio/node-cross-spawn",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cross-spawn@7.0.6?package-id=0294f77c8e4a38d6",
      "type": "library",
      "author": "André Cruz <andre@moxy.studio>",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/moxystudio/node-cross-spawn",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/cross-spawn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cross-spawn@7.0.6?package-id=d1879eb42e3e39d0",
      "type": "library",
      "author": "André Cruz <andre@moxy.studio>",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/moxystudio/node-cross-spawn",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cross-spawn/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/css-line-break@2.1.0?package-id=2dd6e750ccd66c69",
      "type": "library",
      "author": "Niklas von Hertzen <niklasvh@gmail.com> (https://hertzen.com)",
      "name": "css-line-break",
      "version": "2.1.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:css-line-break:css-line-break:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/css-line-break@2.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/niklasvh/css-line-break.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/niklasvh/css-line-break#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css-line-break:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_line_break:css-line-break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_line_break:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css-line:css-line-break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css-line:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_line:css-line-break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_line:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:css-line-break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css:css-line-break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css:css_line_break:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/css-line-break@2.1.0/node_modules/css-line-break/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/css-select@5.2.2?package-id=10ddccfa51c1069c",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "css-select",
      "version": "5.2.2",
      "description": "a CSS selector compiler/engine",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:css-select:css-select:5.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/css-select@5.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/css-select.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css-select:css_select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_select:css-select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css_select:css_select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:css-select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:css_select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css:css-select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:css:css_select:5.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/css-select@5.2.2/node_modules/css-select/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/css-what@6.2.2?package-id=64a788ce0750dccc",
      "type": "library",
      "author": "Felix Böhm <me@feedic.com> (http://feedic.com)",
      "name": "css-what",
      "version": "6.2.2",
      "description": "a CSS selector parser",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:css-what_project:css-what:6.2.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/css-what@6.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/fb55/css-what",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/css-what@6.2.2/node_modules/css-what/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=680092004d064fd0",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "cssesc",
      "version": "3.0.0",
      "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/cssesc.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/cssesc",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cssesc@3.0.0/node_modules/cssesc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=e9ab726caf6c1bff",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "cssesc",
      "version": "3.0.0",
      "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/cssesc.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/cssesc",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cssesc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/csstype@3.1.3?package-id=cf381f9156f98c3e",
      "type": "library",
      "author": "Fredrik Nicol <fredrik.nicol@gmail.com>",
      "name": "csstype",
      "version": "3.1.3",
      "description": "Strict TypeScript and Flow types for style based on MDN data",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:csstype:csstype:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/csstype@3.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/frenic/csstype",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:frenic:csstype:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/csstype@3.1.3/node_modules/csstype/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cytoscape@3.33.1?package-id=c5345cd255639223",
      "type": "library",
      "name": "cytoscape",
      "version": "3.33.1",
      "description": "Graph theory (a.k.a. network) library for analysis and visualisation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cytoscape:cytoscape:3.33.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cytoscape@3.33.1",
      "externalReferences": [
        {
          "url": "https://github.com/cytoscape/cytoscape.js.git",
          "type": "distribution"
        },
        {
          "url": "http://js.cytoscape.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cytoscape@3.33.1/node_modules/cytoscape/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cytoscape-cose-bilkent@4.1.0?package-id=a31393b5c7d7f606",
      "type": "library",
      "name": "cytoscape-cose-bilkent",
      "version": "4.1.0",
      "description": "The CoSE layout for Cytoscape.js by Bilkent with enhanced compound node placement",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cytoscape-cose-bilkent:cytoscape-cose-bilkent:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cytoscape-cose-bilkent@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/cytoscape/cytoscape.js-cose-bilkent.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cytoscape/cytoscape.js-cose-bilkent",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape-cose-bilkent:cytoscape_cose_bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_cose_bilkent:cytoscape-cose-bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_cose_bilkent:cytoscape_cose_bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape-cose:cytoscape-cose-bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape-cose:cytoscape_cose_bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_cose:cytoscape-cose-bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_cose:cytoscape_cose_bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape:cytoscape-cose-bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape:cytoscape_cose_bilkent:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cytoscape-cose-bilkent@4.1.0_cytoscape@3.33.1/node_modules/cytoscape-cose-bilkent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/cytoscape-fcose@2.2.0?package-id=93f985475c68da06",
      "type": "library",
      "author": "iVis-at-Bilkent",
      "name": "cytoscape-fcose",
      "version": "2.2.0",
      "description": "The fCoSE layout for Cytoscape.js by Bilkent with fast compound node placement",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:cytoscape-fcose:cytoscape-fcose:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/cytoscape-fcose@2.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/iVis-at-Bilkent/cytoscape.js-fcose.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iVis-at-Bilkent/cytoscape.js-fcose",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape-fcose:cytoscape_fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_fcose:cytoscape-fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape_fcose:cytoscape_fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:cytoscape-fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:cytoscape_fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape:cytoscape-fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cytoscape:cytoscape_fcose:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/cytoscape-fcose@2.2.0_cytoscape@3.33.1/node_modules/cytoscape-fcose/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3@7.9.0?package-id=c1a992582d53102a",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3",
      "version": "7.9.0",
      "description": "Data-Driven Documents",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3:d3:7.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3@7.9.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3@7.9.0/node_modules/d3/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-array@2.12.1?package-id=08b7d435159d8756",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-array",
      "version": "2.12.1",
      "description": "Array manipulation, ordering, searching, summarizing, etc.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-array:d3-array:2.12.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-array@2.12.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-array.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-array/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-array:d3_array:2.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_array:d3-array:2.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_array:d3_array:2.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-array:2.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_array:2.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-array@2.12.1/node_modules/d3-array/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-array@3.2.4?package-id=7cdedf2f80c94c37",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-array",
      "version": "3.2.4",
      "description": "Array manipulation, ordering, searching, summarizing, etc.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-array:d3-array:3.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-array@3.2.4",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-array.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-array/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-array:d3_array:3.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_array:d3-array:3.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_array:d3_array:3.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-array:3.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_array:3.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-array@3.2.4/node_modules/d3-array/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-axis@3.0.0?package-id=c4fa0135cb61f4a6",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-axis",
      "version": "3.0.0",
      "description": "Displays automatic reference lines for scales.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-axis:d3-axis:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-axis@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-axis.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-axis/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-axis:d3_axis:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_axis:d3-axis:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_axis:d3_axis:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-axis:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_axis:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-axis@3.0.0/node_modules/d3-axis/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-brush@3.0.0?package-id=3bad58c5849b1a5f",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-brush",
      "version": "3.0.0",
      "description": "Select a one- or two-dimensional region using the mouse or touch.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-brush:d3-brush:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-brush@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-brush.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-brush/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-brush:d3_brush:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_brush:d3-brush:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_brush:d3_brush:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-brush:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_brush:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-brush@3.0.0/node_modules/d3-brush/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-chord@3.0.1?package-id=2387b067f5b35819",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-chord",
      "version": "3.0.1",
      "description": "Visualize relationships or network flow with an aesthetically-pleasing circular layout.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-chord:d3-chord:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-chord@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-chord.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-chord/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-chord:d3_chord:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_chord:d3-chord:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_chord:d3_chord:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-chord:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_chord:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-chord@3.0.1/node_modules/d3-chord/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-color@3.1.0?package-id=90a2ffe1003c0481",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-color",
      "version": "3.1.0",
      "description": "Color spaces! RGB, HSL, Cubehelix, Lab and HCL (Lch).",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-color:d3-color:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-color@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-color.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-color/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-color:d3_color:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_color:d3-color:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_color:d3_color:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-color:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_color:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-color@3.1.0/node_modules/d3-color/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-contour@4.0.2?package-id=1ce44cb6f88560c8",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-contour",
      "version": "4.0.2",
      "description": "Compute contour polygons using marching squares.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-contour:d3-contour:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-contour@4.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-contour.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-contour/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-contour:d3_contour:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_contour:d3-contour:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_contour:d3_contour:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-contour:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_contour:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-contour@4.0.2/node_modules/d3-contour/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-delaunay@6.0.4?package-id=18ccaf101e9ebea3",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike), Vladimir Agafonkin (https://agafonkin.com), Philippe Rivière (https://visionscarto.net)",
      "name": "d3-delaunay",
      "version": "6.0.4",
      "description": "Compute the Voronoi diagram of a set of two-dimensional points.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-delaunay:d3-delaunay:6.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-delaunay@6.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-delaunay.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/d3/d3-delaunay",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-delaunay:d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_delaunay:d3-delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_delaunay:d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_delaunay:6.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-delaunay@6.0.4/node_modules/d3-delaunay/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-dispatch@3.0.1?package-id=98873e4bf0fa483f",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-dispatch",
      "version": "3.0.1",
      "description": "Register named callbacks and call them with arguments.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-dispatch:d3-dispatch:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-dispatch@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-dispatch.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-dispatch/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-dispatch:d3_dispatch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_dispatch:d3-dispatch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_dispatch:d3_dispatch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-dispatch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_dispatch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-dispatch@3.0.1/node_modules/d3-dispatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-drag@3.0.0?package-id=400341aacefa8758",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-drag",
      "version": "3.0.0",
      "description": "Drag and drop SVG, HTML or Canvas using mouse or touch input.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-drag:d3-drag:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-drag@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-drag.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-drag/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-drag:d3_drag:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_drag:d3-drag:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_drag:d3_drag:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-drag:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_drag:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-drag@3.0.0/node_modules/d3-drag/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-dsv@3.0.1?package-id=69e478429a3911a0",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-dsv",
      "version": "3.0.1",
      "description": "A parser and formatter for delimiter-separated values, such as CSV and TSV",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-dsv:d3-dsv:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-dsv@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-dsv.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-dsv/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-dsv:d3_dsv:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_dsv:d3-dsv:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_dsv:d3_dsv:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-dsv:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_dsv:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-dsv@3.0.1/node_modules/d3-dsv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-ease@3.0.1?package-id=a9a1286993eff749",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-ease",
      "version": "3.0.1",
      "description": "Easing functions for smooth animation.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-ease:d3-ease:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-ease@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-ease.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-ease/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-ease:d3_ease:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_ease:d3-ease:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_ease:d3_ease:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-ease:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_ease:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-ease@3.0.1/node_modules/d3-ease/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-fetch@3.0.1?package-id=7ec2c701a7b92316",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-fetch",
      "version": "3.0.1",
      "description": "Convenient parsing for Fetch.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-fetch:d3-fetch:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-fetch@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-fetch.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-fetch/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-fetch:d3_fetch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_fetch:d3-fetch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_fetch:d3_fetch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-fetch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_fetch:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-fetch@3.0.1/node_modules/d3-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-force@3.0.0?package-id=4f4184ac7fe17cc2",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-force",
      "version": "3.0.0",
      "description": "Force-directed graph layout using velocity Verlet integration.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-force:d3-force:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-force@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-force.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-force/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-force:d3_force:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_force:d3-force:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_force:d3_force:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-force:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_force:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-force@3.0.0/node_modules/d3-force/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-format@3.1.0?package-id=59018a9772dfc473",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-format",
      "version": "3.1.0",
      "description": "Format numbers for human consumption.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-format:d3-format:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-format@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-format.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-format/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-format:d3_format:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_format:d3-format:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_format:d3_format:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-format:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_format:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-format@3.1.0/node_modules/d3-format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-geo@3.1.1?package-id=a5e3f91edde23397",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-geo",
      "version": "3.1.1",
      "description": "Shapes and calculators for spherical coordinates.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-geo:d3-geo:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-geo@3.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-geo.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-geo/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-geo:d3_geo:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_geo:d3-geo:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_geo:d3_geo:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-geo:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_geo:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-geo@3.1.1/node_modules/d3-geo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-hierarchy@3.1.2?package-id=ec00ac29a28c04b7",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-hierarchy",
      "version": "3.1.2",
      "description": "Layout algorithms for visualizing hierarchical data.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-hierarchy:d3-hierarchy:3.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-hierarchy@3.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-hierarchy.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-hierarchy/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-hierarchy:d3_hierarchy:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_hierarchy:d3-hierarchy:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_hierarchy:d3_hierarchy:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-hierarchy:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_hierarchy:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-hierarchy@3.1.2/node_modules/d3-hierarchy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-interpolate@3.0.1?package-id=1dc5eea1613df766",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-interpolate",
      "version": "3.0.1",
      "description": "Interpolate numbers, colors, strings, arrays, objects, whatever!",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-interpolate:d3-interpolate:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-interpolate@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-interpolate.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-interpolate/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-interpolate:d3_interpolate:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_interpolate:d3-interpolate:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_interpolate:d3_interpolate:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-interpolate:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_interpolate:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-interpolate@3.0.1/node_modules/d3-interpolate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-path@1.0.9?package-id=4372fec7ddb69fed",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-path",
      "version": "1.0.9",
      "description": "Serialize Canvas path commands to SVG.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-path:d3-path:1.0.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-path@1.0.9",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-path.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-path/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-path:d3_path:1.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_path:d3-path:1.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_path:d3_path:1.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-path:1.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_path:1.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-path@1.0.9/node_modules/d3-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-path@3.1.0?package-id=b306a127e48d84cd",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-path",
      "version": "3.1.0",
      "description": "Serialize Canvas path commands to SVG.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-path:d3-path:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-path@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-path.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-path/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-path:d3_path:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_path:d3-path:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_path:d3_path:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-path:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_path:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-path@3.1.0/node_modules/d3-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-polygon@3.0.1?package-id=46f3a25d9f3f9015",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-polygon",
      "version": "3.0.1",
      "description": "Operations for two-dimensional polygons.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-polygon:d3-polygon:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-polygon@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-polygon.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-polygon/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-polygon:d3_polygon:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_polygon:d3-polygon:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_polygon:d3_polygon:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-polygon:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_polygon:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-polygon@3.0.1/node_modules/d3-polygon/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-quadtree@3.0.1?package-id=551c379ef13cede9",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-quadtree",
      "version": "3.0.1",
      "description": "Two-dimensional recursive spatial subdivision.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-quadtree:d3-quadtree:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-quadtree@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-quadtree.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-quadtree/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-quadtree:d3_quadtree:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_quadtree:d3-quadtree:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_quadtree:d3_quadtree:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-quadtree:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_quadtree:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-quadtree@3.0.1/node_modules/d3-quadtree/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-random@3.0.1?package-id=b19beb0b2617446d",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-random",
      "version": "3.0.1",
      "description": "Generate random numbers from various distributions.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-random:d3-random:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-random@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-random.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-random/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-random:d3_random:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_random:d3-random:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_random:d3_random:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-random:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_random:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-random@3.0.1/node_modules/d3-random/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-sankey@0.12.3?package-id=8364bef38a93763f",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike/)",
      "name": "d3-sankey",
      "version": "0.12.3",
      "description": "Visualize flow between nodes in a directed acyclic network.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-sankey:d3-sankey:0.12.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-sankey@0.12.3",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-sankey.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/d3/d3-sankey",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-sankey:d3_sankey:0.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_sankey:d3-sankey:0.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_sankey:d3_sankey:0.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-sankey:0.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_sankey:0.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-sankey@0.12.3/node_modules/d3-sankey/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-scale@4.0.2?package-id=412931b247e92100",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-scale",
      "version": "4.0.2",
      "description": "Encodings that map abstract data to visual representation.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-scale:d3-scale:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-scale@4.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-scale.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-scale/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-scale:d3_scale:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale:d3-scale:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale:d3_scale:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-scale:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_scale:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-scale@4.0.2/node_modules/d3-scale/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-scale-chromatic@3.1.0?package-id=58734704dcc22c9d",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-scale-chromatic",
      "version": "3.1.0",
      "description": "Sequential, diverging and categorical color schemes.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-scale-chromatic:d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-scale-chromatic@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-scale-chromatic.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-scale-chromatic/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-scale-chromatic:d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale_chromatic:d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale_chromatic:d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-scale:d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-scale:d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale:d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_scale:d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-scale-chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_scale_chromatic:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-scale-chromatic@3.1.0/node_modules/d3-scale-chromatic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-selection@3.0.0?package-id=df02b1faff4a4c73",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-selection",
      "version": "3.0.0",
      "description": "Data-driven DOM manipulation: select elements and join them to data.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-selection:d3-selection:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-selection@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-selection.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-selection/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-selection:d3_selection:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_selection:d3-selection:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_selection:d3_selection:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-selection:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_selection:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-selection@3.0.0/node_modules/d3-selection/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-shape@1.3.7?package-id=db1c241f91c26556",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-shape",
      "version": "1.3.7",
      "description": "Graphical primitives for visualization, such as lines and areas.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-shape:d3-shape:1.3.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-shape@1.3.7",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-shape.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-shape/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-shape:d3_shape:1.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_shape:d3-shape:1.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_shape:d3_shape:1.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-shape:1.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_shape:1.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-shape@1.3.7/node_modules/d3-shape/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-shape@3.2.0?package-id=80a2642fd00c8865",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-shape",
      "version": "3.2.0",
      "description": "Graphical primitives for visualization, such as lines and areas.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-shape:d3-shape:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-shape@3.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-shape.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-shape/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-shape:d3_shape:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_shape:d3-shape:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_shape:d3_shape:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-shape:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_shape:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-shape@3.2.0/node_modules/d3-shape/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-time@3.1.0?package-id=240d2d93c3a98eee",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-time",
      "version": "3.1.0",
      "description": "A calculator for humanity’s peculiar conventions of time.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-time:d3-time:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-time@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-time.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-time/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-time:d3_time:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time:d3-time:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time:d3_time:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-time:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_time:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-time@3.1.0/node_modules/d3-time/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-time-format@4.1.0?package-id=6646e285fff91993",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-time-format",
      "version": "4.1.0",
      "description": "A JavaScript time formatter and parser inspired by strftime and strptime.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-time-format:d3-time-format:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-time-format@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-time-format.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-time-format/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-time-format:d3_time_format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time_format:d3-time-format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time_format:d3_time_format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-time:d3-time-format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-time:d3_time_format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time:d3-time-format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_time:d3_time_format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-time-format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_time_format:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-time-format@4.1.0/node_modules/d3-time-format/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-timer@3.0.1?package-id=5f21590093d7cb8d",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "d3-timer",
      "version": "3.0.1",
      "description": "An efficient queue capable of managing thousands of concurrent animations.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-timer:d3-timer:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-timer@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-timer.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-timer/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-timer:d3_timer:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_timer:d3-timer:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_timer:d3_timer:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-timer:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_timer:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-timer@3.0.1/node_modules/d3-timer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-transition@3.0.1?package-id=c117868faa9de537",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-transition",
      "version": "3.0.1",
      "description": "Animated transitions for D3 selections.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-transition:d3-transition:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-transition@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-transition.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-transition/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-transition:d3_transition:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_transition:d3-transition:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_transition:d3_transition:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-transition:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_transition:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-transition@3.0.1_d3-selection@3.0.0/node_modules/d3-transition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/d3-zoom@3.0.0?package-id=207c78ede05d39ea",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "d3-zoom",
      "version": "3.0.0",
      "description": "Pan and zoom SVG, HTML or Canvas using mouse or touch input.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:d3-zoom:d3-zoom:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/d3-zoom@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/d3/d3-zoom.git",
          "type": "distribution"
        },
        {
          "url": "https://d3js.org/d3-zoom/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3-zoom:d3_zoom:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_zoom:d3-zoom:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3_zoom:d3_zoom:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3-zoom:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:d3:d3_zoom:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/d3-zoom@3.0.0/node_modules/d3-zoom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dagre-d3-es@7.0.11?package-id=4fd2087f8b794f51",
      "type": "library",
      "author": "Thibaut Lassalle (https://tbo47.github.io/), Alois Klink (https://github.com/aloisklink), David Newell (https://github.com/rustedgrail), Sidharth Vinod (https://github.com/sidharthv96)",
      "name": "dagre-d3-es",
      "version": "7.0.11",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dagre-d3-es:dagre-d3-es:7.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dagre-d3-es@7.0.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/tbo47/dagre-es.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre-d3-es:dagre_d3_es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre_d3_es:dagre-d3-es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre_d3_es:dagre_d3_es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre-d3:dagre-d3-es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre-d3:dagre_d3_es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre_d3:dagre-d3-es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre_d3:dagre_d3_es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre:dagre-d3-es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dagre:dagre_d3_es:7.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dagre-d3-es@7.0.11/node_modules/dagre-d3-es/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/dario.cat/mergo@v1.0.2?package-id=30b82cd5462de301",
      "type": "library",
      "name": "dario.cat/mergo",
      "version": "v1.0.2",
      "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/dario.cat/mergo@v1.0.2?package-id=16ba26e2904bfac3",
      "type": "library",
      "name": "dario.cat/mergo",
      "version": "v1.0.2",
      "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/dash@0.5.12-2?arch=amd64&distro=debian-12.15&package-id=d99eda363265247f",
      "type": "library",
      "publisher": "Andrej Shadura <andrewsh@debian.org>",
      "name": "dash",
      "version": "0.5.12-2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dash:dash:0.5.12-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/dash@0.5.12-2?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/dash/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/dash.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/dash.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/dash.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/dash.postrm"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/dash.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "191"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/dataflowengineoss_3@2.5.24?package-id=1a12e7e8e95a9b2c",
      "type": "library",
      "name": "dataflowengineoss_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:dataflowengineoss-3:dataflowengineoss-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/dataflowengineoss_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b3f179ddbc898014410c66c699de0368d13b4f2f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataflowengineoss-3:dataflowengineoss_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataflowengineoss_3:dataflowengineoss-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataflowengineoss_3:dataflowengineoss_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataflowengineoss:dataflowengineoss-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataflowengineoss:dataflowengineoss_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:dataflowengineoss-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:dataflowengineoss_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:dataflowengineoss-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:dataflowengineoss_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.dataflowengineoss_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.dataflowengineoss_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/date-fns@4.1.0?package-id=7ef7c4358d4c6424",
      "type": "library",
      "author": "Sasha Koss <koss@nocorp.me>, Lesha Koss <regiusprod@gmail.com>",
      "name": "date-fns",
      "version": "4.1.0",
      "description": "Modern JavaScript date utility library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:date-fns:date-fns:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/date-fns@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/date-fns/date-fns",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns:date_fns:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns:date-fns:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns:date_fns:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date:date-fns:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date:date_fns:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/date-fns-jalali@4.1.0-0?package-id=138d1279365f3314",
      "type": "library",
      "name": "date-fns-jalali",
      "version": "4.1.0-0",
      "description": "Modern JavaScript date utility library for jalali calendar",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:date-fns-jalali:date-fns-jalali:4.1.0-0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/date-fns-jalali@4.1.0-0",
      "externalReferences": [
        {
          "url": "https://github.com/date-fns-jalali/date-fns-jalali",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns-jalali:date_fns_jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns_jalali:date-fns-jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns_jalali:date_fns_jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns:date-fns-jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date-fns:date_fns_jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns:date-fns-jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date_fns:date_fns_jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date:date-fns-jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:date:date_fns_jalali:4.1.0-0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/date-fns-jalali@4.1.0-0/node_modules/date-fns-jalali/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dayjs@1.11.18?package-id=696a8f80262d6485",
      "type": "library",
      "author": "iamkun",
      "name": "dayjs",
      "version": "1.11.18",
      "description": "2KB immutable date time library alternative to Moment.js with the same modern API ",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iamkun:dayjs:1.11.18:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dayjs@1.11.18",
      "externalReferences": [
        {
          "url": "https://github.com/iamkun/dayjs.git",
          "type": "distribution"
        },
        {
          "url": "https://day.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dayjs:dayjs:1.11.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dayjs@1.11.18/node_modules/dayjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15&package-id=242708e27fd24140",
      "type": "library",
      "publisher": "Debconf Developers <debconf-devel@lists.alioth.debian.org>",
      "name": "debconf",
      "version": "1.5.82",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debconf:debconf:1.5.82:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/debconf/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/debconf.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/debconf.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/debconf.config"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/debconf.list"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/debconf.postinst"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/debconf.templates"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "491"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/debian-archive-keyring@2023.3%2Bdeb12u2?arch=all&distro=debian-12.15&package-id=13c7b506427f3aee",
      "type": "library",
      "publisher": "Debian Release Team <packages@release.debian.org>",
      "name": "debian-archive-keyring",
      "version": "2023.3+deb12u2",
      "licenses": [
        {
          "license": {
            "name": "sha256:b32aecaae84643700a33bc9ee83fa9b36938d35aa7b61b5042092eca77ddb732"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/debian-archive-keyring@2023.3%2Bdeb12u2?arch=all&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian-archive-keyring:debian_archive_keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian_archive_keyring:debian-archive-keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian_archive_keyring:debian_archive_keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian-archive:debian-archive-keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian-archive:debian_archive_keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian_archive:debian-archive-keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian_archive:debian_archive_keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian:debian-archive-keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:debian:debian_archive_keyring:2023.3\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/debian-archive-keyring/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/debian-archive-keyring.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "293"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64&distro=debian-12.15&package-id=2587c3c4d8d21d21",
      "type": "library",
      "publisher": "Clint Adams <clint@debian.org>",
      "name": "debianutils",
      "version": "5.7-0.5~deb12u1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "SMAIL-GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debianutils:debianutils:5.7-0.5\\~deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/debianutils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/debianutils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/debianutils.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/debianutils.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/debianutils.postrm"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/debianutils.prerm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/debianutils.triggers"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "243"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/debug@2.6.9?package-id=124686df286cc48c",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
      "name": "debug",
      "version": "2.6.9",
      "description": "small debugging utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "url": "git://github.com/visionmedia/debug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/debug@2.6.9/node_modules/debug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/debug@4.4.3?package-id=22e4c896c90a489c",
      "type": "library",
      "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/debug@4.4.3/node_modules/debug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/debug@4.4.3?package-id=694c23723787d514",
      "type": "library",
      "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/debug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/debug@4.4.3?package-id=b2fd211408f3d707",
      "type": "library",
      "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/debug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/decimal.js-light@2.5.1?package-id=8e05b03639a1f6ea",
      "type": "library",
      "author": "Michael Mclaughlin <M8ch88l@gmail.com>",
      "name": "decimal.js-light",
      "version": "2.5.1",
      "description": "An arbitrary-precision Decimal type for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:decimal.js-light:decimal.js-light:2.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/decimal.js-light@2.5.1",
      "externalReferences": [
        {
          "url": "https://github.com/MikeMcl/decimal.js-light.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decimal.js-light:decimal.js_light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decimal.js_light:decimal.js-light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decimal.js_light:decimal.js_light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decimal.js:decimal.js-light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decimal.js:decimal.js_light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:MikeMcl:decimal.js-light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:MikeMcl:decimal.js_light:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/decimal.js-light@2.5.1/node_modules/decimal.js-light/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/decode-named-character-reference@1.2.0?package-id=25017a997033c295",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "decode-named-character-reference",
      "version": "1.2.0",
      "description": "Decode named character references",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:decode-named-character-reference:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/decode-named-character-reference@1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode-named-character-reference:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named_character_reference:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named_character_reference:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode-named-character:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode-named-character:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named_character:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named_character:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode-named:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode-named:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode_named:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode:decode-named-character-reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decode:decode_named_character_reference:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/decode-named-character-reference@1.2.0/node_modules/decode-named-character-reference/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=7780ef9a8d72f41f",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "decompress-response",
      "version": "6.0.0",
      "description": "Decompress a HTTP response if needed",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/decompress-response@6.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/decompress-response@6.0.0/node_modules/decompress-response/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/deep-eql@5.0.2?package-id=7a9bdd167cd325c1",
      "type": "library",
      "author": "Jake Luer <jake@alogicalparadox.com>, Keith Cirkel (https://github.com/keithamus), dougluce (https://github.com/dougluce), Lorenz Leutgeb (https://github.com/flowlo)",
      "name": "deep-eql",
      "version": "5.0.2",
      "description": "Improved deep equality testing for Node.js and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:deep-eql:deep-eql:5.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/deep-eql@5.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:deep-eql:deep_eql:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:deep_eql:deep-eql:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:deep_eql:deep_eql:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:deep:deep-eql:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:deep:deep_eql:5.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/deep-eql@5.0.2/node_modules/deep-eql/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=2790127d9e70c1cd",
      "type": "library",
      "author": "Viacheslav Lotsmanov <lotsmanov89@gmail.com>, Romain Prieto (https://github.com/rprieto), Max Maximov (https://github.com/maxmaximov), Marshall Bowers (https://github.com/maxdeviant), Misha Wakerman (https://github.com/mwakerman)",
      "name": "deep-extend",
      "version": "0.6.0",
      "description": "Recursive object extending",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "url": "git://github.com/unclechu/node-deep-extend.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/unclechu/node-deep-extend",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/deep-extend@0.6.0/node_modules/deep-extend/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/delaunator@5.0.1?package-id=7911d9051202a5e6",
      "type": "library",
      "author": "Vladimir Agafonkin",
      "name": "delaunator",
      "version": "5.0.1",
      "description": "An incredibly fast JavaScript library for Delaunay triangulation of 2D points",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:delaunator:delaunator:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/delaunator@5.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/mapbox/delaunator.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mapbox:delaunator:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/delaunator@5.0.1/node_modules/delaunator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/delay@5.0.0?package-id=c0204e46e9ed5625",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "delay",
      "version": "5.0.0",
      "description": "Delay a promise a specified amount of time",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:delay:delay:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/delay@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/delay@5.0.0/node_modules/delay/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=1f9de173e75563da",
      "type": "library",
      "author": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/), Mike Atkins <apeherder@gmail.com>",
      "name": "delayed-stream",
      "version": "1.0.0",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-delayed-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/felixge/node-delayed-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:delayed-stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:delayed_stream:delayed-stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:delayed_stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:delayed:delayed-stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:delayed:delayed_stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:felixge:delayed-stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:felixge:delayed_stream:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/delayed-stream@1.0.0/node_modules/delayed-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/depd@2.0.0?package-id=cea3cd2271d6209a",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "depd",
      "version": "2.0.0",
      "description": "Deprecate all the things",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/depd@2.0.0/node_modules/depd/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dequal@2.0.3?package-id=b50e1f055b2a3fd3",
      "type": "library",
      "author": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)",
      "name": "dequal",
      "version": "2.0.3",
      "description": "A tiny (304B to 489B) utility for check for deep equality",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dequal:dequal:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dequal@2.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dequal@2.0.3/node_modules/dequal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/destroy@1.2.0?package-id=a290662f5e87ccf4",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "destroy",
      "version": "1.2.0",
      "description": "destroy a stream if possible",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/destroy@1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/destroy@1.2.0/node_modules/destroy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/detect-libc@2.1.2?package-id=cab377b0648d9b70",
      "type": "library",
      "author": "Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>, Vinícius Lourenço <vinyygamerlol@gmail.com>",
      "name": "detect-libc",
      "version": "2.1.2",
      "description": "Node.js module to detect the C standard library (libc) implementation family and version",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/detect-libc@2.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/lovell/detect-libc.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/detect-libc@2.1.2/node_modules/detect-libc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/detect-node-es@1.1.0?package-id=49bb785ac5b8b10b",
      "type": "library",
      "author": "Ilya Kantor",
      "name": "detect-node-es",
      "version": "1.1.0",
      "description": "Detect Node.JS (as opposite to browser environment). ESM modification",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:detect-node-es:detect-node-es:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/detect-node-es@1.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/thekashey/detect-node",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thekashey/detect-node",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect-node-es:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_node_es:detect-node-es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_node_es:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect-node:detect-node-es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect-node:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_node:detect-node-es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect_node:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thekashey:detect-node-es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thekashey:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect:detect-node-es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:detect:detect_node_es:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/detect-node-es@1.1.0/node_modules/detect-node-es/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/devlop@1.1.0?package-id=cb25f9b7f9898ba8",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "devlop",
      "version": "1.1.0",
      "description": "Do things in development and nothing otherwise",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:devlop:devlop:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/devlop@1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/devlop@1.1.0/node_modules/devlop/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/diff@5.2.2?package-id=efead97d9524f354",
      "type": "library",
      "author": "Kevin Decker <kpdecker@gmail.com> (http://incaseofstairs.com), Mark Amery <markrobertamery+jsdiff@gmail.com>",
      "name": "diff",
      "version": "5.2.2",
      "description": "A JavaScript text diff implementation.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:kpdecker:jsdiff:5.2.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/diff@5.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/kpdecker/jsdiff.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/diff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/diffutils@1%3A3.8-4?arch=amd64&distro=debian-12.15&package-id=eae3581d3fe173ec",
      "type": "library",
      "publisher": "Santiago Vila <sanvila@debian.org>",
      "name": "diffutils",
      "version": "1:3.8-4",
      "licenses": [
        {
          "license": {
            "id": "FSFAP"
          }
        },
        {
          "license": {
            "id": "FSFULLR"
          }
        },
        {
          "license": {
            "id": "GFDL-1.3-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "GFDL-NIV-1.3"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.8-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/diffutils@1%3A3.8-4?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/diffutils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/diffutils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/diffutils.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1598"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/discontinuous-range@1.0.0?package-id=7021182cf59cd3ad",
      "type": "library",
      "author": "David Tudury <david.tudury@gmail.com>",
      "name": "discontinuous-range",
      "version": "1.0.0",
      "description": "for adding, subtracting, and indexing discontinuous ranges of numbers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:discontinuous-range:discontinuous-range:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/discontinuous-range@1.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/dtudury/discontinuous-range.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/dtudury/discontinuous-range",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:discontinuous-range:discontinuous_range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:discontinuous_range:discontinuous-range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:discontinuous_range:discontinuous_range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:discontinuous:discontinuous-range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:discontinuous:discontinuous_range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtudury:discontinuous-range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtudury:discontinuous_range:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/discontinuous-range@1.0.0/node_modules/discontinuous-range/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers@5.2.1?package-id=865dfbf07ebf420c",
      "type": "library",
      "author": "Jason Quense <monastic.panic@gmail.com>",
      "name": "dom-helpers",
      "version": "5.2.1",
      "description": "tiny modular DOM lib for ie9+",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-bootstrap:dom-helpers:5.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers@5.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/react-bootstrap/dom-helpers.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/react-bootstrap/dom-helpers#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-bootstrap:dom_helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers:dom-helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers:dom_helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers:dom-helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers:dom_helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/activeelement?package-id=3e2725a8610aaa90",
      "type": "library",
      "name": "dom-helpers/activeElement",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/activeElement:dom-helpers\\/activeElement:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/activeElement",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/activeElement:dom_helpers\\/activeElement:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/activeElement:dom-helpers\\/activeElement:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/activeElement:dom_helpers\\/activeElement:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/activeElement:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/activeElement:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/activeElement/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/addclass?package-id=7bdec7713db868f5",
      "type": "library",
      "name": "dom-helpers/addClass",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/addClass:dom-helpers\\/addClass:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/addClass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/addClass:dom_helpers\\/addClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/addClass:dom-helpers\\/addClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/addClass:dom_helpers\\/addClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/addClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/addClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/addClass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/addeventlistener?package-id=3b58cf8e343ff618",
      "type": "library",
      "name": "dom-helpers/addEventListener",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/addEventListener:dom-helpers\\/addEventListener:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/addEventListener",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/addEventListener:dom_helpers\\/addEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/addEventListener:dom-helpers\\/addEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/addEventListener:dom_helpers\\/addEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/addEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/addEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/addEventListener/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/animate?package-id=44c113814090f99a",
      "type": "library",
      "name": "dom-helpers/animate",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/animate:dom-helpers\\/animate:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/animate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/animate:dom_helpers\\/animate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/animate:dom-helpers\\/animate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/animate:dom_helpers\\/animate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/animate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/animate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/animate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/animationframe?package-id=8238556675b6678a",
      "type": "library",
      "name": "dom-helpers/animationFrame",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/animationFrame:dom-helpers\\/animationFrame:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/animationFrame",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/animationFrame:dom_helpers\\/animationFrame:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/animationFrame:dom-helpers\\/animationFrame:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/animationFrame:dom_helpers\\/animationFrame:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/animationFrame:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/animationFrame:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/animationFrame/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/attribute?package-id=2fb79b6992701415",
      "type": "library",
      "name": "dom-helpers/attribute",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/attribute:dom-helpers\\/attribute:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/attribute",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/attribute:dom_helpers\\/attribute:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/attribute:dom-helpers\\/attribute:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/attribute:dom_helpers\\/attribute:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/attribute:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/attribute:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/attribute/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/camelize?package-id=deeb9830d15f3db1",
      "type": "library",
      "name": "dom-helpers/camelize",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/camelize:dom-helpers\\/camelize:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/camelize",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/camelize:dom_helpers\\/camelize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/camelize:dom-helpers\\/camelize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/camelize:dom_helpers\\/camelize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/camelize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/camelize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/camelize/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/camelizestyle?package-id=885f921b6df5e60f",
      "type": "library",
      "name": "dom-helpers/camelizeStyle",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/camelizeStyle:dom-helpers\\/camelizeStyle:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/camelizeStyle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/camelizeStyle:dom_helpers\\/camelizeStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/camelizeStyle:dom-helpers\\/camelizeStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/camelizeStyle:dom_helpers\\/camelizeStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/camelizeStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/camelizeStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/camelizeStyle/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/canusedom?package-id=a94307eda59adf33",
      "type": "library",
      "name": "dom-helpers/canUseDOM",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/canUseDOM:dom-helpers\\/canUseDOM:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/canUseDOM",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/canUseDOM:dom_helpers\\/canUseDOM:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/canUseDOM:dom-helpers\\/canUseDOM:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/canUseDOM:dom_helpers\\/canUseDOM:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/canUseDOM:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/canUseDOM:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/canUseDOM/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/childelements?package-id=93529bb76ce3d195",
      "type": "library",
      "name": "dom-helpers/childElements",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/childElements:dom-helpers\\/childElements:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/childElements",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/childElements:dom_helpers\\/childElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/childElements:dom-helpers\\/childElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/childElements:dom_helpers\\/childElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/childElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/childElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/childElements/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/childnodes?package-id=60698af1feb11d6c",
      "type": "library",
      "name": "dom-helpers/childNodes",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/childNodes:dom-helpers\\/childNodes:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/childNodes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/childNodes:dom_helpers\\/childNodes:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/childNodes:dom-helpers\\/childNodes:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/childNodes:dom_helpers\\/childNodes:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/childNodes:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/childNodes:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/childNodes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/clear?package-id=cf7916be28d77b43",
      "type": "library",
      "name": "dom-helpers/clear",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/clear:dom-helpers\\/clear:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/clear",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/clear:dom_helpers\\/clear:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/clear:dom-helpers\\/clear:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/clear:dom_helpers\\/clear:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/clear:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/clear:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/clear/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/closest?package-id=8f7ad93205f69fc2",
      "type": "library",
      "name": "dom-helpers/closest",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/closest:dom-helpers\\/closest:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/closest",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/closest:dom_helpers\\/closest:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/closest:dom-helpers\\/closest:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/closest:dom_helpers\\/closest:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/closest:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/closest:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/closest/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/collectelements?package-id=560c452a0f005e4b",
      "type": "library",
      "name": "dom-helpers/collectElements",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/collectElements:dom-helpers\\/collectElements:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/collectElements",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/collectElements:dom_helpers\\/collectElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/collectElements:dom-helpers\\/collectElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/collectElements:dom_helpers\\/collectElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/collectElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/collectElements:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/collectElements/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/collectsiblings?package-id=4ff9c5a29370c380",
      "type": "library",
      "name": "dom-helpers/collectSiblings",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/collectSiblings:dom-helpers\\/collectSiblings:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/collectSiblings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/collectSiblings:dom_helpers\\/collectSiblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/collectSiblings:dom-helpers\\/collectSiblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/collectSiblings:dom_helpers\\/collectSiblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/collectSiblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/collectSiblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/collectSiblings/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/contains?package-id=5c8bbf5abb5f76cc",
      "type": "library",
      "name": "dom-helpers/contains",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/contains:dom-helpers\\/contains:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/contains",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/contains:dom_helpers\\/contains:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/contains:dom-helpers\\/contains:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/contains:dom_helpers\\/contains:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/contains:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/contains:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/contains/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/css?package-id=09f89952d16b8bd2",
      "type": "library",
      "name": "dom-helpers/css",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/css:dom-helpers\\/css:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/css",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/css:dom_helpers\\/css:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/css:dom-helpers\\/css:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/css:dom_helpers\\/css:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/css:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/css:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/css/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/filtereventhandler?package-id=3de1c29bbd4bb513",
      "type": "library",
      "name": "dom-helpers/filterEventHandler",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/filterEventHandler:dom-helpers\\/filterEventHandler:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/filterEventHandler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/filterEventHandler:dom_helpers\\/filterEventHandler:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/filterEventHandler:dom-helpers\\/filterEventHandler:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/filterEventHandler:dom_helpers\\/filterEventHandler:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/filterEventHandler:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/filterEventHandler:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/filterEventHandler/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/getcomputedstyle?package-id=5eaf2ead905f08ff",
      "type": "library",
      "name": "dom-helpers/getComputedStyle",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/getComputedStyle:dom-helpers\\/getComputedStyle:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/getComputedStyle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/getComputedStyle:dom_helpers\\/getComputedStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/getComputedStyle:dom-helpers\\/getComputedStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/getComputedStyle:dom_helpers\\/getComputedStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/getComputedStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/getComputedStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/getComputedStyle/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/getscrollaccessor?package-id=3fcbdb9c9fe6fc90",
      "type": "library",
      "name": "dom-helpers/getScrollAccessor",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/getScrollAccessor:dom-helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/getScrollAccessor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/getScrollAccessor:dom_helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/getScrollAccessor:dom-helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/getScrollAccessor:dom_helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/getScrollAccessor:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/getScrollAccessor/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/hasclass?package-id=985b910d96fb9c2f",
      "type": "library",
      "name": "dom-helpers/hasClass",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/hasClass:dom-helpers\\/hasClass:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/hasClass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/hasClass:dom_helpers\\/hasClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hasClass:dom-helpers\\/hasClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hasClass:dom_helpers\\/hasClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/hasClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/hasClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/hasClass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/height?package-id=8451453ef2606ff1",
      "type": "library",
      "name": "dom-helpers/height",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/height:dom-helpers\\/height:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/height",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/height:dom_helpers\\/height:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/height:dom-helpers\\/height:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/height:dom_helpers\\/height:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/height:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/height:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/height/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/hyphenate?package-id=18898abab45e01e1",
      "type": "library",
      "name": "dom-helpers/hyphenate",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/hyphenate:dom-helpers\\/hyphenate:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/hyphenate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/hyphenate:dom_helpers\\/hyphenate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hyphenate:dom-helpers\\/hyphenate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hyphenate:dom_helpers\\/hyphenate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/hyphenate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/hyphenate:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/hyphenate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/hyphenatestyle?package-id=9918dc53d6642140",
      "type": "library",
      "name": "dom-helpers/hyphenateStyle",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/hyphenateStyle:dom-helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/hyphenateStyle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/hyphenateStyle:dom_helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hyphenateStyle:dom-helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/hyphenateStyle:dom_helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/hyphenateStyle:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/hyphenateStyle/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/insertafter?package-id=7d0b6d556d8f7cd9",
      "type": "library",
      "name": "dom-helpers/insertAfter",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/insertAfter:dom-helpers\\/insertAfter:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/insertAfter",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/insertAfter:dom_helpers\\/insertAfter:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/insertAfter:dom-helpers\\/insertAfter:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/insertAfter:dom_helpers\\/insertAfter:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/insertAfter:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/insertAfter:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/insertAfter/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/isdocument?package-id=e2c42ab0c4af7237",
      "type": "library",
      "name": "dom-helpers/isDocument",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/isDocument:dom-helpers\\/isDocument:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/isDocument",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/isDocument:dom_helpers\\/isDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isDocument:dom-helpers\\/isDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isDocument:dom_helpers\\/isDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/isDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/isDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/isDocument/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/isinput?package-id=a5cc1c11c8b114f6",
      "type": "library",
      "name": "dom-helpers/isInput",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/isInput:dom-helpers\\/isInput:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/isInput",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/isInput:dom_helpers\\/isInput:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isInput:dom-helpers\\/isInput:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isInput:dom_helpers\\/isInput:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/isInput:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/isInput:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/isInput/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/istransform?package-id=d2725420adf69c0e",
      "type": "library",
      "name": "dom-helpers/isTransform",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/isTransform:dom-helpers\\/isTransform:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/isTransform",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/isTransform:dom_helpers\\/isTransform:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isTransform:dom-helpers\\/isTransform:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isTransform:dom_helpers\\/isTransform:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/isTransform:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/isTransform:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/isTransform/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/isvisible?package-id=9677138d3c449777",
      "type": "library",
      "name": "dom-helpers/isVisible",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/isVisible:dom-helpers\\/isVisible:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/isVisible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/isVisible:dom_helpers\\/isVisible:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isVisible:dom-helpers\\/isVisible:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isVisible:dom_helpers\\/isVisible:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/isVisible:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/isVisible:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/isVisible/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/iswindow?package-id=d8c1e92ab5d7868c",
      "type": "library",
      "name": "dom-helpers/isWindow",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/isWindow:dom-helpers\\/isWindow:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/isWindow",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/isWindow:dom_helpers\\/isWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isWindow:dom-helpers\\/isWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/isWindow:dom_helpers\\/isWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/isWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/isWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/isWindow/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/listen?package-id=2ffb18c1e9c71e01",
      "type": "library",
      "name": "dom-helpers/listen",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/listen:dom-helpers\\/listen:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/listen",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/listen:dom_helpers\\/listen:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/listen:dom-helpers\\/listen:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/listen:dom_helpers\\/listen:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/listen:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/listen:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/listen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/matches?package-id=dd5c4f8aee380538",
      "type": "library",
      "name": "dom-helpers/matches",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/matches:dom-helpers\\/matches:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/matches",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/matches:dom_helpers\\/matches:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/matches:dom-helpers\\/matches:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/matches:dom_helpers\\/matches:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/matches:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/matches:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/matches/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/nextuntil?package-id=d5615b0ae1546edd",
      "type": "library",
      "name": "dom-helpers/nextUntil",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/nextUntil:dom-helpers\\/nextUntil:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/nextUntil",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/nextUntil:dom_helpers\\/nextUntil:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/nextUntil:dom-helpers\\/nextUntil:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/nextUntil:dom_helpers\\/nextUntil:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/nextUntil:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/nextUntil:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/nextUntil/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/offset?package-id=59619fe68c8166b0",
      "type": "library",
      "name": "dom-helpers/offset",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/offset:dom-helpers\\/offset:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/offset",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/offset:dom_helpers\\/offset:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/offset:dom-helpers\\/offset:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/offset:dom_helpers\\/offset:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/offset:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/offset:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/offset/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/offsetparent?package-id=f6c4d4281576ad9e",
      "type": "library",
      "name": "dom-helpers/offsetParent",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/offsetParent:dom-helpers\\/offsetParent:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/offsetParent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/offsetParent:dom_helpers\\/offsetParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/offsetParent:dom-helpers\\/offsetParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/offsetParent:dom_helpers\\/offsetParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/offsetParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/offsetParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/offsetParent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/ownerdocument?package-id=edc440de337f73bd",
      "type": "library",
      "name": "dom-helpers/ownerDocument",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/ownerDocument:dom-helpers\\/ownerDocument:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/ownerDocument",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/ownerDocument:dom_helpers\\/ownerDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/ownerDocument:dom-helpers\\/ownerDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/ownerDocument:dom_helpers\\/ownerDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/ownerDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/ownerDocument:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/ownerDocument/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/ownerwindow?package-id=d8cad6ad0743750b",
      "type": "library",
      "name": "dom-helpers/ownerWindow",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/ownerWindow:dom-helpers\\/ownerWindow:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/ownerWindow",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/ownerWindow:dom_helpers\\/ownerWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/ownerWindow:dom-helpers\\/ownerWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/ownerWindow:dom_helpers\\/ownerWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/ownerWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/ownerWindow:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/ownerWindow/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/parents?package-id=c1d240cf39de559b",
      "type": "library",
      "name": "dom-helpers/parents",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/parents:dom-helpers\\/parents:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/parents",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/parents:dom_helpers\\/parents:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/parents:dom-helpers\\/parents:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/parents:dom_helpers\\/parents:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/parents:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/parents:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/parents/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/position?package-id=759cf47e1ca217ef",
      "type": "library",
      "name": "dom-helpers/position",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/position:dom-helpers\\/position:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/position",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/position:dom_helpers\\/position:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/position:dom-helpers\\/position:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/position:dom_helpers\\/position:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/position:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/position:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/position/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/prepend?package-id=c8f4dd645dfe0806",
      "type": "library",
      "name": "dom-helpers/prepend",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/prepend:dom-helpers\\/prepend:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/prepend",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/prepend:dom_helpers\\/prepend:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/prepend:dom-helpers\\/prepend:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/prepend:dom_helpers\\/prepend:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/prepend:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/prepend:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/prepend/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/queryselectorall?package-id=5b85400faafc6074",
      "type": "library",
      "name": "dom-helpers/querySelectorAll",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/querySelectorAll:dom-helpers\\/querySelectorAll:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/querySelectorAll",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/querySelectorAll:dom_helpers\\/querySelectorAll:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/querySelectorAll:dom-helpers\\/querySelectorAll:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/querySelectorAll:dom_helpers\\/querySelectorAll:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/querySelectorAll:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/querySelectorAll:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/querySelectorAll/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/remove?package-id=4cdcea6a2d8cbcb4",
      "type": "library",
      "name": "dom-helpers/remove",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/remove:dom-helpers\\/remove:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/remove",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/remove:dom_helpers\\/remove:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/remove:dom-helpers\\/remove:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/remove:dom_helpers\\/remove:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/remove:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/remove:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/remove/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/removeclass?package-id=b2701afd0d936c56",
      "type": "library",
      "name": "dom-helpers/removeClass",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/removeClass:dom-helpers\\/removeClass:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/removeClass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/removeClass:dom_helpers\\/removeClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/removeClass:dom-helpers\\/removeClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/removeClass:dom_helpers\\/removeClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/removeClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/removeClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/removeClass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/removeeventlistener?package-id=ea51011fb378c0cb",
      "type": "library",
      "name": "dom-helpers/removeEventListener",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/removeEventListener:dom-helpers\\/removeEventListener:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/removeEventListener",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/removeEventListener:dom_helpers\\/removeEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/removeEventListener:dom-helpers\\/removeEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/removeEventListener:dom_helpers\\/removeEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/removeEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/removeEventListener:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/removeEventListener/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/scrollleft?package-id=51b5385c40654d0f",
      "type": "library",
      "name": "dom-helpers/scrollLeft",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/scrollLeft:dom-helpers\\/scrollLeft:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/scrollLeft",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/scrollLeft:dom_helpers\\/scrollLeft:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollLeft:dom-helpers\\/scrollLeft:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollLeft:dom_helpers\\/scrollLeft:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/scrollLeft:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/scrollLeft:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/scrollLeft/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/scrollparent?package-id=529e105b3742af77",
      "type": "library",
      "name": "dom-helpers/scrollParent",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/scrollParent:dom-helpers\\/scrollParent:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/scrollParent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/scrollParent:dom_helpers\\/scrollParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollParent:dom-helpers\\/scrollParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollParent:dom_helpers\\/scrollParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/scrollParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/scrollParent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/scrollParent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/scrollto?package-id=72b39eb87739be83",
      "type": "library",
      "name": "dom-helpers/scrollTo",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/scrollTo:dom-helpers\\/scrollTo:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/scrollTo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/scrollTo:dom_helpers\\/scrollTo:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollTo:dom-helpers\\/scrollTo:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollTo:dom_helpers\\/scrollTo:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/scrollTo:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/scrollTo:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/scrollTo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/scrolltop?package-id=7675c88f096e1f78",
      "type": "library",
      "name": "dom-helpers/scrollTop",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/scrollTop:dom-helpers\\/scrollTop:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/scrollTop",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/scrollTop:dom_helpers\\/scrollTop:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollTop:dom-helpers\\/scrollTop:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollTop:dom_helpers\\/scrollTop:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/scrollTop:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/scrollTop:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/scrollTop/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/scrollbarsize?package-id=8e72fd9e908bfd5a",
      "type": "library",
      "name": "dom-helpers/scrollbarSize",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/scrollbarSize:dom-helpers\\/scrollbarSize:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/scrollbarSize",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/scrollbarSize:dom_helpers\\/scrollbarSize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollbarSize:dom-helpers\\/scrollbarSize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/scrollbarSize:dom_helpers\\/scrollbarSize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/scrollbarSize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/scrollbarSize:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/scrollbarSize/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/siblings?package-id=74c372f1995f945c",
      "type": "library",
      "name": "dom-helpers/siblings",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/siblings:dom-helpers\\/siblings:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/siblings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/siblings:dom_helpers\\/siblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/siblings:dom-helpers\\/siblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/siblings:dom_helpers\\/siblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/siblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/siblings:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/siblings/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/text?package-id=456959a576578418",
      "type": "library",
      "name": "dom-helpers/text",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/text:dom-helpers\\/text:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/text",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/text:dom_helpers\\/text:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/text:dom-helpers\\/text:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/text:dom_helpers\\/text:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/text:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/text:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/text/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/toggleclass?package-id=ed358dc2b1100850",
      "type": "library",
      "name": "dom-helpers/toggleClass",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/toggleClass:dom-helpers\\/toggleClass:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/toggleClass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/toggleClass:dom_helpers\\/toggleClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/toggleClass:dom-helpers\\/toggleClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/toggleClass:dom_helpers\\/toggleClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/toggleClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/toggleClass:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/toggleClass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/transitionend?package-id=5824a911650c8c55",
      "type": "library",
      "name": "dom-helpers/transitionEnd",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/transitionEnd:dom-helpers\\/transitionEnd:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/transitionEnd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/transitionEnd:dom_helpers\\/transitionEnd:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/transitionEnd:dom-helpers\\/transitionEnd:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/transitionEnd:dom_helpers\\/transitionEnd:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/transitionEnd:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/transitionEnd:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/transitionEnd/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/triggerevent?package-id=fa1324dba07bb9a9",
      "type": "library",
      "name": "dom-helpers/triggerEvent",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/triggerEvent:dom-helpers\\/triggerEvent:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/triggerEvent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/triggerEvent:dom_helpers\\/triggerEvent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/triggerEvent:dom-helpers\\/triggerEvent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/triggerEvent:dom_helpers\\/triggerEvent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/triggerEvent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/triggerEvent:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/triggerEvent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-helpers/width?package-id=46664d6c52fa089f",
      "type": "library",
      "name": "dom-helpers/width",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:dom-helpers\\/width:dom-helpers\\/width:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-helpers/width",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-helpers\\/width:dom_helpers\\/width:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/width:dom-helpers\\/width:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_helpers\\/width:dom_helpers\\/width:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-helpers\\/width:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_helpers\\/width:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-helpers@5.2.1/node_modules/dom-helpers/width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dom-serializer@2.0.0?package-id=39934cb732b5fc48",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "dom-serializer",
      "version": "2.0.0",
      "description": "render domhandler DOM nodes to a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dom-serializer:dom-serializer:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dom-serializer@2.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/cheeriojs/dom-serializer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom-serializer:dom_serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_serializer:dom-serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom_serializer:dom_serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheeriojs:dom-serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cheeriojs:dom_serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom-serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dom:dom_serializer:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dom-serializer@2.0.0/node_modules/dom-serializer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/domelementtype@2.3.0?package-id=6c74234a4f34533f",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "domelementtype",
      "version": "2.3.0",
      "description": "all the types of nodes in htmlparser2's dom",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:domelementtype:domelementtype:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/domelementtype@2.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/domelementtype.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:domelementtype:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/domelementtype@2.3.0/node_modules/domelementtype/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/domhandler@5.0.3?package-id=d13a25916875649f",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "domhandler",
      "version": "5.0.3",
      "description": "Handler for htmlparser2 that turns pages into a dom",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:domhandler:domhandler:5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/domhandler@5.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/domhandler.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:domhandler:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/domhandler@5.0.3/node_modules/domhandler/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dompurify@3.3.0?package-id=8e088854f10913b1",
      "type": "library",
      "author": "Dr.-Ing. Mario Heiderich, Cure53 <mario@cure53.de> (https://cure53.de/)",
      "name": "dompurify",
      "version": "3.3.0",
      "description": "DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else using Blink or WebKit). DOMPurify is written by security people who have vast background in web attacks and XSS. Fear not.",
      "licenses": [
        {
          "expression": "MPL-2.0 OR Apache-2.0"
        }
      ],
      "cpe": "cpe:2.3:a:dompurify:dompurify:3.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dompurify@3.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/cure53/DOMPurify.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cure53/DOMPurify",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cure53:dompurify:3.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dompurify@3.3.0/node_modules/dompurify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dompurify@3.4.13?package-id=130129da40368542",
      "type": "library",
      "author": "Dr.-Ing. Mario Heiderich, Cure53 <mario@cure53.de> (https://cure53.de/)",
      "name": "dompurify",
      "version": "3.4.13",
      "description": "DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It runs as JavaScript and works in all modern browsers, as well as in Node.js (via jsdom). DOMPurify is written by security people who have vast background in web attacks and XSS. Fear not.",
      "licenses": [
        {
          "expression": "MPL-2.0 OR Apache-2.0"
        }
      ],
      "cpe": "cpe:2.3:a:dompurify:dompurify:3.4.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dompurify@3.4.13",
      "externalReferences": [
        {
          "url": "git://github.com/cure53/DOMPurify.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/cure53/DOMPurify",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cure53:dompurify:3.4.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dompurify@3.4.13/node_modules/dompurify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/domutils@3.2.2?package-id=1a0a9415d836a500",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "domutils",
      "version": "3.2.2",
      "description": "Utilities for working with htmlparser2's dom",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:domutils:domutils:3.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/domutils@3.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/domutils.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:domutils:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/domutils@3.2.2/node_modules/domutils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dotenv@17.4.2?package-id=eeec43db9d1b465c",
      "type": "library",
      "name": "dotenv",
      "version": "17.4.2",
      "description": "Loads environment variables from .env file",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:motdotla:dotenv:17.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dotenv@17.4.2",
      "externalReferences": [
        {
          "url": "git://github.com/motdotla/dotenv.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/motdotla/dotenv#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dotenv:dotenv:17.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dotenv@17.4.2/node_modules/dotenv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
      "type": "library",
      "publisher": "Dpkg Developers <debian-dpkg@lists.debian.org>",
      "name": "dpkg",
      "version": "1.21.23",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "public-domain-s-s-d"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dpkg:dpkg:1.21.23:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/dpkg/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/dpkg.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/dpkg.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/dpkg.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/dpkg.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/dpkg.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/dpkg.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "6409"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/dunder-proto@1.0.1?package-id=bc728652175bcbe3",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "dunder-proto",
      "version": "1.0.1",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/dunder-proto.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/es-shims/dunder-proto#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:dunder-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:dunder_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/dunder-proto@1.0.1/node_modules/dunder-proto/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/duplexer2@0.1.4?package-id=50d6b03e1bf64529",
      "type": "library",
      "author": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)",
      "name": "duplexer2",
      "version": "0.1.4",
      "description": "Like duplexer but using streams3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/duplexer2@0.1.4/node_modules/duplexer2/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/e2fsprogs@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=4be417a9253d1325&upstream=e2fsprogs%401.47.0-2",
      "type": "library",
      "publisher": "Theodore Y. Ts'o <tytso@mit.edu>",
      "name": "e2fsprogs",
      "version": "1.47.0-2+b2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "Kazlib"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        }
      ],
      "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.47.0-2\\+b2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/e2fsprogs@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&upstream=e2fsprogs%401.47.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/e2fsprogs/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/e2fsprogs.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1497"
        },
        {
          "name": "syft:metadata:source",
          "value": "e2fsprogs"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.47.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0?package-id=1b8672330133d853",
      "type": "library",
      "author": "Masaki Komagata",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/komagata/eastasianwidth.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/eastasianwidth@0.2.0/node_modules/eastasianwidth/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0?package-id=eb2f67d88d311063",
      "type": "library",
      "author": "Masaki Komagata",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/komagata/eastasianwidth.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/eastasianwidth/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0?package-id=7f9f95408b5489ed",
      "type": "library",
      "author": "Masaki Komagata",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/komagata/eastasianwidth.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/eastasianwidth/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/edn-data@1.2.2?package-id=f529ad91074deb44",
      "type": "library",
      "author": "Jorin Vogel",
      "name": "edn-data",
      "version": "1.2.2",
      "description": "EDN parser and generator that work with plain JS data, with support for TS and node streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:edn-data:edn-data:1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/edn-data@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jorinvo/edn-data.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jorinvo/edn-data#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:edn-data:edn_data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:edn_data:edn-data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:edn_data:edn_data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jorinvo:edn-data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jorinvo:edn_data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:edn:edn-data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:edn:edn_data:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/edn-data@1.2.2/node_modules/edn-data/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=49d704746b7aa131",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "ee-first",
      "version": "1.1.1",
      "description": "return the first event in a set of ee/event pairs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ee-first@1.1.1/node_modules/ee-first/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/electron-to-chromium@1.5.232?package-id=ee036c465646d98f",
      "type": "library",
      "author": "Kilian Valkhof",
      "name": "electron-to-chromium",
      "version": "1.5.232",
      "description": "Provides a list of electron-to-chromium version mappings",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:electron-to-chromium:electron-to-chromium:1.5.232:*:*:*:*:*:*:*",
      "purl": "pkg:npm/electron-to-chromium@1.5.232",
      "externalReferences": [
        {
          "url": "https://github.com/kilian/electron-to-chromium/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron-to-chromium:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron_to_chromium:electron-to-chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron_to_chromium:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron-to:electron-to-chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron-to:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron_to:electron-to-chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron_to:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron:electron-to-chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kilian:electron-to-chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kilian:electron_to_chromium:1.5.232:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/electron-to-chromium@1.5.232/node_modules/electron-to-chromium/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel@8.6.0?package-id=e4635bfc55a63a1e",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel@8.6.0/node_modules/embla-carousel/cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel@8.6.0?package-id=a9964c42f96c4aa8",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel@8.6.0/node_modules/embla-carousel/esm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel@8.6.0?package-id=9e04390ac751c77f",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel@8.6.0/node_modules/embla-carousel/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-react@8.6.0?package-id=4364a1e6373739b1",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-react",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-react@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-react@8.6.0_react@19.2.1/node_modules/embla-carousel-react/cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-react@8.6.0?package-id=e6049203060a18ce",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-react",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-react@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-react@8.6.0_react@19.2.1/node_modules/embla-carousel-react/esm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-react@8.6.0?package-id=4a24c85614040e85",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-react",
      "version": "8.6.0",
      "description": "A lightweight carousel library with fluid motion and great swipe precision",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-react@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_react:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_react:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-react@8.6.0_react@19.2.1/node_modules/embla-carousel-react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-reactive-utils@8.6.0?package-id=6d55aa45bd86d77d",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-reactive-utils",
      "version": "8.6.0",
      "description": "Reactive utilities for Embla Carousel",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-reactive-utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-reactive-utils@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive-utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-reactive-utils@8.6.0_embla-carousel@8.6.0/node_modules/embla-carousel-reactive-utils/cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-reactive-utils@8.6.0?package-id=73592ff591a37677",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-reactive-utils",
      "version": "8.6.0",
      "description": "Reactive utilities for Embla Carousel",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-reactive-utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-reactive-utils@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive-utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-reactive-utils@8.6.0_embla-carousel@8.6.0/node_modules/embla-carousel-reactive-utils/esm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/embla-carousel-reactive-utils@8.6.0?package-id=dd8232ad79f859fc",
      "type": "library",
      "author": "David Jerleke",
      "name": "embla-carousel-reactive-utils",
      "version": "8.6.0",
      "description": "Reactive utilities for Embla Carousel",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:embla-carousel-reactive-utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/embla-carousel-reactive-utils@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidjerleke/embla-carousel",
          "type": "distribution"
        },
        {
          "url": "https://www.embla-carousel.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive-utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive_utils:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel-reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel_reactive:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla-carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla_carousel:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla-carousel-reactive-utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:embla:embla_carousel_reactive_utils:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/embla-carousel-reactive-utils@8.6.0_embla-carousel@8.6.0/node_modules/embla-carousel-reactive-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@10.6.0?package-id=f50904d56ee570a2",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "10.6.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:10.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@10.6.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:10.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/emoji-regex@10.6.0/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=59c5a7ae94ccf809",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/emoji-regex@8.0.0/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=ce0d5c397539794b",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/string-width-cjs/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=b4ca0ed87d5ed0c6",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=28e0fb3f8e3ca7da",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=95bf68aefbfa1649",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/emoji-regex@9.2.2/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=c51db6fbabfefbfa",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=4e9f196c37502914",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=83d235a6dca5cf28",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/emoji-regex.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/emoji-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=e7fddc76faa699a9",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "encodeurl",
      "version": "1.0.2",
      "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/encodeurl@1.0.2/node_modules/encodeurl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encodeurl@2.0.0?package-id=701bfdccca65deab",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "encodeurl",
      "version": "2.0.0",
      "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encodeurl@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/encodeurl@2.0.0/node_modules/encodeurl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encoding@0.1.13?package-id=fd9908b395b286eb",
      "type": "library",
      "author": "Andris Reinman",
      "name": "encoding",
      "version": "0.1.13",
      "description": "Convert encodings, uses iconv-lite",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "url": "https://github.com/andris9/encoding.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/encoding@0.1.13/node_modules/encoding/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encoding@0.1.13?package-id=2a298ab39d72796a",
      "type": "library",
      "author": "Andris Reinman",
      "name": "encoding",
      "version": "0.1.13",
      "description": "Convert encodings, uses iconv-lite",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "url": "https://github.com/andris9/encoding.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/encoding/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encoding@0.1.13?package-id=2e65e46db5de6d6d",
      "type": "library",
      "author": "Andris Reinman",
      "name": "encoding",
      "version": "0.1.13",
      "description": "Convert encodings, uses iconv-lite",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "url": "https://github.com/andris9/encoding.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/encoding/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/encoding-sniffer@0.2.1?package-id=d649aaac7c280072",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "encoding-sniffer",
      "version": "0.2.1",
      "description": "Implementation of the HTML encoding sniffer algo, with stream support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:encoding-sniffer:encoding-sniffer:0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/encoding-sniffer@0.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/encoding-sniffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:encoding-sniffer:encoding_sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:encoding_sniffer:encoding-sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:encoding_sniffer:encoding_sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:encoding:encoding-sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:encoding:encoding_sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:encoding-sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:encoding_sniffer:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/encoding-sniffer@0.2.1/node_modules/encoding-sniffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/end-of-stream@1.4.5?package-id=34b3579b505b24c0",
      "type": "library",
      "author": "Mathias Buus <mathiasbuus@gmail.com>",
      "name": "end-of-stream",
      "version": "1.4.5",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/end-of-stream@1.4.5",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/end-of-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/end-of-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:end-of-stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/end-of-stream@1.4.5/node_modules/end-of-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/enhanced-resolve@5.18.3?package-id=1a70178f211ab5e2",
      "type": "library",
      "author": "Tobias Koppers @sokra",
      "name": "enhanced-resolve",
      "version": "5.18.3",
      "description": "Offers a async require.resolve function. It's highly configurable.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:enhanced-resolve:enhanced-resolve:5.18.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/enhanced-resolve@5.18.3",
      "externalReferences": [
        {
          "url": "git://github.com/webpack/enhanced-resolve.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/webpack/enhanced-resolve",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:enhanced-resolve:enhanced_resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:enhanced_resolve:enhanced-resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:enhanced_resolve:enhanced_resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:enhanced:enhanced-resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:enhanced:enhanced_resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webpack:enhanced-resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webpack:enhanced_resolve:5.18.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/enhanced-resolve@5.18.3/node_modules/enhanced-resolve/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/entities@4.5.0?package-id=e1cb9342ae53bad9",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "entities",
      "version": "4.5.0",
      "description": "Encode & decode XML and HTML entities with ease & speed",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:entities:entities:4.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/entities@4.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/entities.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:entities:4.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/entities@4.5.0/node_modules/entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/entities@6.0.1?package-id=4fb2904a966cd4eb",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "entities",
      "version": "6.0.1",
      "description": "Encode & decode XML and HTML entities with ease & speed",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:entities:entities:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/entities@6.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/entities.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:entities:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/entities@6.0.1/node_modules/entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/entities@7.0.1?package-id=0fbce88270435137",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "entities",
      "version": "7.0.1",
      "description": "Encode & decode XML and HTML entities with ease & speed",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:entities:entities:7.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/entities@7.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/fb55/entities.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:entities:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/entities@7.0.1/node_modules/entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=e19d0dc4c920697a",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "env-paths",
      "version": "2.2.1",
      "description": "Get paths for storing things like data, config, cache, etc",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/env-paths@2.2.1/node_modules/env-paths/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=2f3097266d32fcc6",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "env-paths",
      "version": "2.2.1",
      "description": "Get paths for storing things like data, config, cache, etc",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/env-paths/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=46baa25e00178533",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "env-paths",
      "version": "2.2.1",
      "description": "Get paths for storing things like data, config, cache, etc",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/env-paths/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/err-code@2.0.3?package-id=7f4edebaee5974ce",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "err-code",
      "version": "2.0.3",
      "description": "Create an error with a code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/err-code@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/js-err-code.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/err-code@2.0.3/node_modules/err-code/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/err-code@2.0.3?package-id=9a36d946ac92936a",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "err-code",
      "version": "2.0.3",
      "description": "Create an error with a code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/err-code@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/js-err-code.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/err-code/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/err-code@2.0.3?package-id=5a50b6b4435c1415",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "err-code",
      "version": "2.0.3",
      "description": "Create an error with a code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/err-code@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/js-err-code.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/err-code/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0?package-id=cc88afda4b864d26",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.47.0",
      "licenses": [
        {
          "license": {
            "name": "\"Apache 2.0\";link=\"http://www.apache.org/licenses/LICENSE-2.0.txt\""
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.google.errorprone.annotations:error-prone-annotations:2.47.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.47.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e64e70c8e2b5a30ce7f1b6c9e3eb7016881e0411"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.errorprone.annotations:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.errorprone.annotations:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.errorprone:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.errorprone:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.errorprone:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.47.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.errorprone.error_prone_annotations-2.47.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.errorprone.error_prone_annotations-2.47.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es-define-property@1.0.1?package-id=9f71b7b76a499b1d",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "es-define-property",
      "version": "1.0.1",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-define-property.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/es-define-property#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es-define-property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es-define-property@1.0.1/node_modules/es-define-property/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es-errors@1.3.0?package-id=61d458a2810699c5",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "es-errors",
      "version": "1.3.0",
      "description": "A simple cache for a few of the JS Error constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-errors.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/es-errors#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es-errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es_errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es-module-lexer@1.7.0?package-id=bbed3ba6e2328aae",
      "type": "library",
      "author": "Guy Bedford",
      "name": "es-module-lexer",
      "version": "1.7.0",
      "description": "Lexes ES modules returning their import/export metadata",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:es-module-lexer:es-module-lexer:1.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es-module-lexer@1.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/guybedford/es-module-lexer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/guybedford/es-module-lexer#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-module-lexer:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_module_lexer:es-module-lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_module_lexer:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guybedford:es-module-lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guybedford:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-module:es-module-lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-module:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_module:es-module-lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_module:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es-module-lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es_module_lexer:1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es-module-lexer@1.7.0/node_modules/es-module-lexer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es-object-atoms@1.1.1?package-id=feaa52a4a68b7562",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "es-object-atoms",
      "version": "1.1.1",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es-object-atoms@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-object-atoms.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/es-object-atoms#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es-object-atoms@1.1.1/node_modules/es-object-atoms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0?package-id=c9962cdbe320eba7",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "es-set-tostringtag",
      "version": "2.1.0",
      "description": "A helper to optimistically set Symbol.toStringTag, when possible.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:es-set-tostringtag:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/es-set-tostringtag.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/es-shims/es-set-tostringtag#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-set-tostringtag:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_set_tostringtag:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_set_tostringtag:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-set:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-set:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_set:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es_set:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es-set-tostringtag@2.1.0/node_modules/es-set-tostringtag/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es6-promise@4.2.8?package-id=8b276920e3e3cf00",
      "type": "library",
      "author": "Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)",
      "name": "es6-promise",
      "version": "4.2.8",
      "description": "A lightweight library that provides tools for organizing asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stefanpenner:es6-promise:4.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es6-promise@4.2.8",
      "externalReferences": [
        {
          "url": "git://github.com/stefanpenner/es6-promise.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stefanpenner/es6-promise",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stefanpenner:es6_promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6-promise:es6-promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6-promise:es6_promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6_promise:es6-promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6_promise:es6_promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6:es6-promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6:es6_promise:4.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es6-promise@4.2.8/node_modules/es6-promise/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/es6-promisify@5.0.0?package-id=dd1cdeaeea3d7a71",
      "type": "library",
      "author": "Mike Hall <mikehall314@gmail.com>",
      "name": "es6-promisify",
      "version": "5.0.0",
      "description": "Converts callback-based functions to ES6 Promises",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:digitaldesignlabs:es6-promisify:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/es6-promisify@5.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/digitaldesignlabs/es6-promisify.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:digitaldesignlabs:es6_promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6-promisify:es6-promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6-promisify:es6_promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6_promisify:es6-promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6_promisify:es6_promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6:es6-promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es6:es6_promisify:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/es6-promisify@5.0.0/node_modules/es6-promisify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/esbuild@0.21.5?package-id=b3b0e9c5d5e1717b",
      "type": "library",
      "name": "esbuild",
      "version": "0.21.5",
      "description": "An extremely fast JavaScript and CSS bundler and minifier.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:esbuild:esbuild:0.21.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/esbuild@0.21.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/esbuild.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/esbuild@0.21.5/node_modules/esbuild/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/esbuild@0.25.10?package-id=180e2d53ada744e2",
      "type": "library",
      "name": "esbuild",
      "version": "0.25.10",
      "description": "An extremely fast JavaScript and CSS bundler and minifier.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:esbuild:esbuild:0.25.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/esbuild@0.25.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/esbuild.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/esbuild@0.25.10/node_modules/esbuild/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/escalade@3.2.0?package-id=ed3f8c5b33eb01d3",
      "type": "library",
      "author": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)",
      "name": "escalade",
      "version": "3.2.0",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:escalade:escalade:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/escalade@3.2.0/node_modules/escalade/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=61117f1c7473c92b",
      "type": "library",
      "name": "escape-html",
      "version": "1.0.3",
      "description": "Escape string for use in HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/escape-html@1.0.3/node_modules/escape-html/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/escape-string-regexp@5.0.0?package-id=a43e8b7bcf2cd07d",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "escape-string-regexp",
      "version": "5.0.0",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/escape-string-regexp@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape-string-regexp:escape_string_regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_string_regexp:escape-string-regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_string_regexp:escape_string_regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape-string:escape-string-regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape-string:escape_string_regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_string:escape-string-regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape_string:escape_string_regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape:escape-string-regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:escape:escape_string_regexp:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/escape-string-regexp@5.0.0/node_modules/escape-string-regexp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/estree-util-is-identifier-name@3.0.0?package-id=97aff6c068acd1ef",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "estree-util-is-identifier-name",
      "version": "3.0.0",
      "description": "Check if something can be an ecmascript (javascript) identifier name",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:estree-util-is-identifier-name:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/estree-util-is-identifier-name@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util-is-identifier-name:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is_identifier_name:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is_identifier_name:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util-is-identifier:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util-is-identifier:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is_identifier:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is_identifier:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util-is:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util-is:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util_is:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-util:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_util:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree:estree-util-is-identifier-name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree:estree_util_is_identifier_name:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/estree-util-is-identifier-name@3.0.0/node_modules/estree-util-is-identifier-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/estree-walker@3.0.3?package-id=7e352234e1a1b2ad",
      "type": "library",
      "author": "Rich Harris",
      "name": "estree-walker",
      "version": "3.0.3",
      "description": "Traverse an ESTree-compliant AST",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:estree-walker:estree-walker:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/estree-walker@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/Rich-Harris/estree-walker",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree-walker:estree_walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_walker:estree-walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree_walker:estree_walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Rich-Harris:estree-walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Rich-Harris:estree_walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree:estree-walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:estree:estree_walker:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/estree-walker@3.0.3/node_modules/estree-walker/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/etag@1.8.1?package-id=3e24bdd49a75a86e",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, David Björklund <david.bjorklund@gmail.com>",
      "name": "etag",
      "version": "1.8.1",
      "description": "Create simple HTTP ETags",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/etag@1.8.1/node_modules/etag/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ethers@6.17.0?package-id=054c779890af63ec",
      "type": "library",
      "author": "Richard Moore <me@ricmoo.com>",
      "name": "ethers",
      "version": "6.17.0",
      "description": "A complete and compact Ethereum library, for dapps, wallets and any other tools.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ethers-io:ethers:6.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ethers@6.17.0",
      "externalReferences": [
        {
          "url": "git://github.com/ethers-io/ethers.js.git",
          "type": "distribution"
        },
        {
          "url": "https://ethers.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ethers:ethers:6.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ethers@6.17.0_bufferutil@4.1.0_utf-8-validate@6.0.6/node_modules/ethers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eventemitter3@4.0.7?package-id=d9d1e702e3d99008",
      "type": "library",
      "author": "Arnout Kazemier",
      "name": "eventemitter3",
      "version": "4.0.7",
      "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:4.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eventemitter3@4.0.7",
      "externalReferences": [
        {
          "url": "git://github.com/primus/eventemitter3.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:primus:eventemitter3:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/eventemitter3@4.0.7/node_modules/eventemitter3/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eventemitter3@5.0.4?package-id=f91951333fe676df",
      "type": "library",
      "author": "Arnout Kazemier",
      "name": "eventemitter3",
      "version": "5.0.4",
      "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:5.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eventemitter3@5.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/primus/eventemitter3.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:primus:eventemitter3:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/eventemitter3@5.0.4/node_modules/eventemitter3/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/exceljs@4.4.0?package-id=b3f0ba11e5c0a924",
      "type": "library",
      "author": "Guyon Roche <guyon@live.com>",
      "name": "exceljs",
      "version": "4.4.0",
      "description": "Excel Workbook Manager - Read and Write xlsx and csv Files.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exceljs_project:exceljs:4.4.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/exceljs@4.4.0",
      "externalReferences": [
        {
          "url": "https://github.com/exceljs/exceljs.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/exceljs@4.4.0/node_modules/exceljs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/expand-template@2.0.3?package-id=328da47f765804a8",
      "type": "library",
      "author": "LM <ralphtheninja@riseup.net>",
      "name": "expand-template",
      "version": "2.0.3",
      "description": "Expand placeholders in a template string",
      "licenses": [
        {
          "expression": "MIT OR WTFPL"
        }
      ],
      "cpe": "cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/expand-template@2.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/ralphtheninja/expand-template.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ralphtheninja/expand-template",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expand-template:expand_template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expand_template:expand-template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expand_template:expand_template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ralphtheninja:expand-template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ralphtheninja:expand_template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expand:expand-template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expand:expand_template:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/expand-template@2.0.3/node_modules/expand-template/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/expect-type@1.2.2?package-id=09be696f2396a2f2",
      "type": "library",
      "name": "expect-type",
      "version": "1.2.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:expect-type:expect-type:1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/expect-type@1.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/mmkal/expect-type.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mmkal/expect-type#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expect-type:expect_type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expect_type:expect-type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expect_type:expect_type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expect:expect-type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expect:expect_type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mmkal:expect-type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mmkal:expect_type:1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/expect-type@1.2.2/node_modules/expect-type/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/exponential-backoff@3.1.2?package-id=8328a24e8893c743",
      "type": "library",
      "author": "Sami Sayegh",
      "name": "exponential-backoff",
      "version": "3.1.2",
      "description": "A utility that allows retrying a function with an exponential delay between attempts.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/exponential-backoff@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/coveooss/exponential-backoff.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/coveooss/exponential-backoff#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/exponential-backoff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=1061a60dd558cbde",
      "type": "library",
      "author": "Sami Sayegh",
      "name": "exponential-backoff",
      "version": "3.1.3",
      "description": "A utility that allows retrying a function with an exponential delay between attempts.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/exponential-backoff@3.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/coveooss/exponential-backoff.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/coveooss/exponential-backoff#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/exponential-backoff@3.1.3/node_modules/exponential-backoff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=ab360dc8b8ac048d",
      "type": "library",
      "author": "Sami Sayegh",
      "name": "exponential-backoff",
      "version": "3.1.3",
      "description": "A utility that allows retrying a function with an exponential delay between attempts.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/exponential-backoff@3.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/coveooss/exponential-backoff.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/coveooss/exponential-backoff#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/exponential-backoff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/express@4.21.2?package-id=e54398cbb94efe46",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>, Aaron Heckmann <aaron.heckmann+github@gmail.com>, Ciaran Jessup <ciaranj@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Guillermo Rauch <rauchg@gmail.com>, Jonathan Ong <me@jongleberry.com>, Roman Shtylman <shtylman+expressjs@gmail.com>, Young Jae Sim <hanul@hanul.me>",
      "name": "express",
      "version": "4.21.2",
      "description": "Fast, unopinionated, minimalist web framework",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openjsf:express:4.21.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/express@4.21.2",
      "externalReferences": [
        {
          "url": "http://expressjs.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/express@4.21.2/node_modules/express/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/express-rate-limit@8.6.0?package-id=ecb65a15c972a6fe",
      "type": "library",
      "author": "Nathan Friedly (http://nfriedly.com/)",
      "name": "express-rate-limit",
      "version": "8.6.0",
      "description": "Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:express-rate-limit:express-rate-limit:8.6.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/express-rate-limit@8.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/express-rate-limit/express-rate-limit.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/express-rate-limit/express-rate-limit",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/express-rate-limit@8.6.0_express@4.21.2/node_modules/express-rate-limit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/exsolve@1.0.7?package-id=f11074b5c11fea99",
      "type": "library",
      "name": "exsolve",
      "version": "1.0.7",
      "description": "Module resolution utilities based on Node.js upstream implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:exsolve:exsolve:1.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/exsolve@1.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/exsolve@1.0.7/node_modules/exsolve/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/extend@3.0.2?package-id=87921a21e6cdcf67",
      "type": "library",
      "author": "Stefan Thomas <justmoon@members.fsf.org> (http://www.justmoon.net), Jordan Harband (https://github.com/ljharb)",
      "name": "extend",
      "version": "3.0.2",
      "description": "Port of jQuery.extend for node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/justmoon/node-extend.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/extend@3.0.2/node_modules/extend/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/eyes@0.1.8?package-id=6892e146aa579066",
      "type": "library",
      "author": "Alexis Sellier <self@cloudhead.net>, Charlie Robbins <charlie@nodejitsu.com>",
      "name": "eyes",
      "version": "0.1.8",
      "description": "a customizable value inspector",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eyes:eyes:0.1.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/eyes@0.1.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/eyes@0.1.8/node_modules/eyes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?package-id=a0a1e4e13bb4dfef",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.google.guava.failureaccess:failureaccess:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.guava:failureaccess:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:failureaccess:failureaccess:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:failureaccess:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:failureaccess:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.failureaccess-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "failureaccess"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.failureaccess-1.0.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-csv@4.3.6?package-id=fcd7edafcdac91dd",
      "type": "library",
      "author": "Doug Martin",
      "name": "fast-csv",
      "version": "4.3.6",
      "description": "CSV parser and writer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:c2fo:fast-csv:4.3.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/fast-csv@4.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/C2FO/fast-csv.git",
          "type": "distribution"
        },
        {
          "url": "http://c2fo.github.com/fast-csv",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-csv@4.3.6/node_modules/fast-csv/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=23fe54e19ac1cd60",
      "type": "library",
      "author": "Evgeny Poberezkin",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-deep-equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_deep_equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_deep_equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epoberezkin:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epoberezkin:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-deep-equal@3.1.3/node_modules/fast-deep-equal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-equals@5.3.2?package-id=6d0953c894485e04",
      "type": "library",
      "author": "tony_quetano@planttheidea.com",
      "name": "fast-equals",
      "version": "5.3.2",
      "description": "A blazing fast equality comparison, either shallow or deep",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:planttheidea:fast-equals:5.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fast-equals@5.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/planttheidea/fast-equals.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/planttheidea/fast-equals#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:planttheidea:fast_equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-equals:fast-equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-equals:fast_equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_equals:fast-equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_equals:fast_equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast-equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast_equals:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-equals@5.3.2/node_modules/fast-equals/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-png@6.4.0?package-id=becb227e687cea19",
      "type": "library",
      "author": "Michaël Zasso",
      "name": "fast-png",
      "version": "6.4.0",
      "description": "PNG image decoder and encoder written entirely in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fast-png:fast-png:6.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fast-png@6.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/image-js/fast-png.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/image-js/fast-png#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-png:fast_png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_png:fast-png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_png:fast_png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:image-js:fast-png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:image-js:fast_png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast-png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast_png:6.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-png@6.4.0/node_modules/fast-png/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-stable-stringify@1.0.0?package-id=f6afc40f2ff3818e",
      "type": "library",
      "author": "Nicky Out",
      "name": "fast-stable-stringify",
      "version": "1.0.0",
      "description": "Deterministic stringification for when performance matters",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fast-stable-stringify:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fast-stable-stringify@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nickyout/fast-stable-stringify.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/nickyout/fast-stable-stringify#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-stable-stringify:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_stable_stringify:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_stable_stringify:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-stable:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast-stable:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_stable:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast_stable:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nickyout:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nickyout:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast-stable-stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fast:fast_stable_stringify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-stable-stringify@1.0.0/node_modules/fast-stable-stringify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fast-uri@3.1.5?package-id=e3edcdc2b10070ac",
      "type": "library",
      "author": "Vincent Le Goff <vince.legoff@gmail.com> (https://github.com/zekth), Matteo Collina <hello@matteocollina.com>, Gürgün Dayıoğlu <hey@gurgun.day> (https://heyhey.to/G), Aras Abbasi <aras.abbasi@gmail.com>, Frazer Smith <frazer.dev@icloud.com> (https://github.com/fdawgs)",
      "name": "fast-uri",
      "version": "3.1.5",
      "description": "Dependency-free RFC 3986 URI toolbox",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openjsf:fast-uri:3.1.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/fast-uri@3.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/fastify/fast-uri.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/fastify/fast-uri",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fastest-levenshtein@1.0.16?package-id=c3eebc763e304138",
      "type": "library",
      "author": "Kasper U. Weihe",
      "name": "fastest-levenshtein",
      "version": "1.0.16",
      "description": "Fastest Levenshtein distance implementation in JS.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fastest-levenshtein@1.0.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ka-weihe/fastest-levenshtein#README",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest-levenshtein:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest_levenshtein:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest_levenshtein:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ka-weihe:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ka-weihe:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest:fastest-levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastest:fastest_levenshtein:1.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fastestsmallesttextencoderdecoder@1.0.22?package-id=e3fb41351174910d",
      "type": "library",
      "author": "Jack Giffin <wowzeryest@gmail.com> (https://jackgiffin.com/)",
      "name": "fastestsmallesttextencoderdecoder",
      "version": "1.0.22",
      "description": "The fastest smallest Javascript polyfill for the encode of TextEncoder and decode of TextDecoder for UTF-8 only. Made by AnonyCo with ❤️ from 🐕s.",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fastestsmallesttextencoderdecoder:fastestsmallesttextencoderdecoder:1.0.22:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fastestsmallesttextencoderdecoder@1.0.22",
      "externalReferences": [
        {
          "url": "git://github.com/anonyco/FastestSmallestTextEncoderDecoder.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/anonyco/FastestSmallestTextEncoderDecoder#quick-start",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anonyco:fastestsmallesttextencoderdecoder:1.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fastestsmallesttextencoderdecoder@1.0.22/node_modules/fastestsmallesttextencoderdecoder/package.json"
        }
      ]
    },
    {
      "bom-ref": "db0be45384258e50",
      "type": "application",
      "name": "fastlist-0.3.0-x64",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:fastlist-0.3.0-x64:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "pe-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "binary"
        },
        {
          "name": "syft:package:metadataType",
          "value": "pe-binary"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x64:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x64:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x64:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x64:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x64:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x64:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x64:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist-0.3.0-x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist_0.3.0_x64:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/vendor/fastlist-0.3.0-x64.exe"
        }
      ]
    },
    {
      "bom-ref": "b7a2c6e2934b11f8",
      "type": "application",
      "name": "fastlist-0.3.0-x86",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:fastlist-0.3.0-x86:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "pe-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "binary"
        },
        {
          "name": "syft:package:metadataType",
          "value": "pe-binary"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x86:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x86:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x86:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x86:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x86:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x86:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x86:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0-x:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0_x:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist-0.3.0:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist_0.3.0:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist-0.3.0-x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist_0.3.0_x86:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist-0.3.0-x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastlist:fastlist_0.3.0_x:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/vendor/fastlist-0.3.0-x86.exe"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fdir@6.5.0?package-id=6ca6e2238256ecdc",
      "type": "library",
      "author": "thecodrr <thecodrr@protonmail.com>",
      "name": "fdir",
      "version": "6.5.0",
      "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fdir@6.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/thecodrr/fdir.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thecodrr/fdir#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fdir@6.5.0_picomatch@4.0.3/node_modules/fdir/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fdir@6.5.0?package-id=3c620be67a7b9394",
      "type": "library",
      "author": "thecodrr <thecodrr@protonmail.com>",
      "name": "fdir",
      "version": "6.5.0",
      "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fdir@6.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/thecodrr/fdir.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thecodrr/fdir#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/fdir/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fflate@0.8.3?package-id=1980d9f05c88beaa",
      "type": "library",
      "author": "Arjun Barrett <arjunbarrett@gmail.com>",
      "name": "fflate",
      "version": "0.8.3",
      "description": "High performance (de)compression in an 8kB package",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:101arrowz:fflate:0.8.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fflate@0.8.3",
      "externalReferences": [
        {
          "url": "https://github.com/101arrowz/fflate",
          "type": "distribution"
        },
        {
          "url": "https://101arrowz.github.io/fflate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fflate:fflate:0.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fflate@0.8.3/node_modules/fflate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/file-uri-to-path@1.0.0?package-id=ed33a8fc8b40861e",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "file-uri-to-path",
      "version": "1.0.0",
      "description": "Convert a file: URI to a file path",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/file-uri-to-path@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/file-uri-to-path.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TooTallNate/file-uri-to-path",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/file-uri-to-path@1.0.0/node_modules/file-uri-to-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=42f115e01ab860ec",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "finalhandler",
      "version": "1.1.2",
      "description": "Node.js final http responder",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/finalhandler@1.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/finalhandler@1.1.2/node_modules/finalhandler/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/finalhandler@1.3.1?package-id=0995027a6fd9d81b",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "finalhandler",
      "version": "1.3.1",
      "description": "Node.js final http responder",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/finalhandler@1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/finalhandler@1.3.1/node_modules/finalhandler/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/findutils@4.9.0-4?arch=amd64&distro=debian-12.15&package-id=1b6d210249e3ac45",
      "type": "library",
      "publisher": "Andreas Metzler <ametzler@debian.org>",
      "name": "findutils",
      "version": "4.9.0-4",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "FSFAP"
          }
        },
        {
          "license": {
            "id": "FSFULLR"
          }
        },
        {
          "license": {
            "id": "GFDL-1.3-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "GFDL-NIV-1.3+"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:findutils:findutils:4.9.0-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/findutils@4.9.0-4?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/findutils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/findutils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/findutils.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1746"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/follow-redirects@1.15.11?package-id=24ad423299549cc1",
      "type": "library",
      "author": "Ruben Verborgh <ruben@verborgh.org> (https://ruben.verborgh.org/), Olivier Lalonde <olalonde@gmail.com> (http://www.syskall.com), James Talmage <james@talmage.io>",
      "name": "follow-redirects",
      "version": "1.15.11",
      "description": "HTTP and HTTPS modules that follow redirects.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:follow-redirects:follow_redirects:1.15.11:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/follow-redirects@1.15.11",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/follow-redirects/follow-redirects.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/follow-redirects/follow-redirects",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/follow-redirects@1.15.11/node_modules/follow-redirects/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/foreground-child@3.3.1?package-id=79998a2c5e04276c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/foreground-child.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/foreground-child@3.3.1/node_modules/foreground-child/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/foreground-child@3.3.1?package-id=66c44cc4538a968d",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/foreground-child.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/foreground-child/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/foreground-child@3.3.1?package-id=1175579b76d01c46",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/foreground-child.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/foreground-child/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/form-data@4.0.4?package-id=60b8dea5562a0293",
      "type": "library",
      "author": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)",
      "name": "form-data",
      "version": "4.0.4",
      "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:form-data:form-data:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/form-data@4.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/form-data/form-data.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:form-data:form_data:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:form_data:form-data:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:form_data:form_data:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:form:form-data:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:form:form_data:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=eca519d20f153465",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "forwarded",
      "version": "0.2.0",
      "description": "Parse HTTP X-Forwarded-For header",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/forwarded@0.2.0/node_modules/forwarded/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fraction.js@4.3.7?package-id=caaf5a4316e9d435",
      "type": "library",
      "author": "Robert Eisele <robert@raw.org> (https://raw.org/)",
      "name": "fraction.js",
      "version": "4.3.7",
      "description": "A rational number library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fraction.js:fraction.js:4.3.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fraction.js@4.3.7",
      "externalReferences": [
        {
          "url": "git://github.com/rawify/Fraction.js.git",
          "type": "distribution"
        },
        {
          "url": "https://www.xarg.org/2014/03/rational-numbers-in-javascript/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rawify:fraction.js:4.3.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fraction.js@4.3.7/node_modules/fraction.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/framer-motion@12.23.22?package-id=76af4e7ab3c57807",
      "type": "library",
      "author": "Matt Perry",
      "name": "framer-motion",
      "version": "12.23.22",
      "description": "A simple and powerful JavaScript animation library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:motiondivision:framer-motion:12.23.22:*:*:*:*:*:*:*",
      "purl": "pkg:npm/framer-motion@12.23.22",
      "externalReferences": [
        {
          "url": "https://github.com/motiondivision/motion/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motiondivision:framer_motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer-motion:framer-motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer-motion:framer_motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer_motion:framer-motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer_motion:framer_motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer:framer-motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framer:framer_motion:12.23.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/framer-motion@12.23.22_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/framer-motion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fresh@0.5.2?package-id=79ce2604112abc49",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "fresh",
      "version": "0.5.2",
      "description": "HTTP response freshness testing",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fresh@0.5.2/node_modules/fresh/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=c669c60964922780",
      "type": "library",
      "author": "Mathias Buus (@mafintosh)",
      "name": "fs-constants",
      "version": "1.0.0",
      "description": "Require constants across node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/mafintosh/fs-constants.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/fs-constants",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:fs-constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:fs_constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fs-constants@1.0.0/node_modules/fs-constants/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=9507cdbf97e25692",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "fs-minipass",
      "version": "3.0.3",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs-minipass@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/fs-minipass#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fs-minipass@3.0.3/node_modules/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=449f9d28a51820a0",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "fs-minipass",
      "version": "3.0.3",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs-minipass@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/fs-minipass#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=cd2084f8ec6e4746",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "fs-minipass",
      "version": "3.0.3",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs-minipass@3.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fs-minipass.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/fs-minipass#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=4e5bf79bfc2b069a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "fs.realpath",
      "version": "1.0.0",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs.realpath.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fs.realpath@1.0.0/node_modules/fs.realpath/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/fstream@1.0.12?package-id=53c48dee49b29de8",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "fstream",
      "version": "1.0.12",
      "description": "Advanced file system stream things",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/fstream@1.0.12",
      "externalReferences": [
        {
          "url": "https://github.com/npm/fstream.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:fstream:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/fstream@1.0.12/node_modules/fstream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/function-bind@1.1.2?package-id=9bad9eebab8aa3cf",
      "type": "library",
      "author": "Raynos <raynos2@gmail.com>, Raynos, Jordan Harband (https://github.com/ljharb)",
      "name": "function-bind",
      "version": "1.1.2",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/Raynos/function-bind.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Raynos/function-bind",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Raynos:function-bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Raynos:function_bind:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/function-bind@1.1.2/node_modules/function-bind/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=58c10ea7ffbc22a3&upstream=gcc-12",
      "type": "library",
      "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
      "name": "gcc-12-base",
      "version": "12.2.0-14+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
          }
        }
      ],
      "cpe": "cpe:2.3:a:gcc-12-base:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&upstream=gcc-12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc-12-base:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc_12_base:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc_12_base:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc-12:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc-12:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc_12:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc_12:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gcc:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/gcc-12-base/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/gcc-12-base:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "100"
        },
        {
          "name": "syft:metadata:source",
          "value": "gcc-12"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2?package-id=ee8a1995c855518d",
      "type": "library",
      "author": "Logan Smyth <loganfsmyth@gmail.com>",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "description": "Allows users to use generators in order to write common functions that can be both sync or async.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:loganfsmyth:gensync:1.0.0-beta.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "url": "https://github.com/loganfsmyth/gensync.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/loganfsmyth/gensync",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gensync:gensync:1.0.0-beta.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/gensync@1.0.0-beta.2/node_modules/gensync/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/geny_3@1.1.1?package-id=65d76ed6662f9d2f",
      "type": "library",
      "name": "geny_3",
      "version": "1.1.1",
      "cpe": "cpe:2.3:a:com.lihaoyi:geny-3:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/geny_3@1.1.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6a194169956dc7c5e64d29cec05b64da9e2fc94a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:geny_3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:geny-3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:geny_3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny-3:geny-3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny-3:geny_3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny_3:geny-3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny_3:geny_3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny:geny-3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geny:geny_3:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.geny_3-1.1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.geny_3-1.1.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=ff6c25ca36ca936b",
      "type": "library",
      "author": "Stefan Penner",
      "name": "get-caller-file",
      "version": "2.0.5",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/stefanpenner/get-caller-file.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stefanpenner:get-caller-file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stefanpenner:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-caller-file@2.0.5/node_modules/get-caller-file/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-east-asian-width@1.6.0?package-id=c960b82454d0e2a7",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "get-east-asian-width",
      "version": "1.6.0",
      "description": "Determine the East Asian Width of a Unicode character",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-east-asian-width:get-east-asian-width:1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-east-asian-width@1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-east-asian-width:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east_asian_width:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east_asian_width:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-east-asian:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-east-asian:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east_asian:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east_asian:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-east:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-east:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_east:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-east-asian-width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_east_asian_width:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-east-asian-width@1.6.0/node_modules/get-east-asian-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0?package-id=5b2555a9023366a5",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-intrinsic.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-intrinsic@1.3.0/node_modules/get-intrinsic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-nonce@1.0.1?package-id=368a1d7321eeefef",
      "type": "library",
      "author": "Anton Korzunov <thekashey@gmail.com>",
      "name": "get-nonce",
      "version": "1.0.1",
      "description": "returns nonce",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-nonce:get-nonce:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-nonce@1.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/get-nonce",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-nonce:get_nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_nonce:get-nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_nonce:get_nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:get-nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:get_nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_nonce:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-nonce@1.0.1/node_modules/get-nonce/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-proto@1.0.1?package-id=982973e4215199fa",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "get-proto",
      "version": "1.0.1",
      "description": "Robustly get the [[Prototype]] of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-proto.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/get-proto#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:get-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:get_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/get-tsconfig@4.12.0?package-id=dae9db5d274de222",
      "type": "library",
      "author": "Hiroki Osame <hiroki.osame@gmail.com>",
      "name": "get-tsconfig",
      "version": "4.12.0",
      "description": "Find and parse the tsconfig.json file from a directory path",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:get-tsconfig:get-tsconfig:4.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/get-tsconfig@4.12.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get-tsconfig:get_tsconfig:4.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_tsconfig:get-tsconfig:4.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get_tsconfig:get_tsconfig:4.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get-tsconfig:4.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:get:get_tsconfig:4.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/get-tsconfig@4.12.0/node_modules/get-tsconfig/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/github-from-package@0.0.0?package-id=7a1e05f8aed33926",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "github-from-package",
      "version": "0.0.0",
      "description": "return the github url from a package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/github-from-package@0.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/github-from-package.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/substack/github-from-package",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:github-from-package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/github-from-package@0.0.0/node_modules/github-from-package/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.20.0?package-id=22b1f2d62a6a0475",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
      "version": "v1.20.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.20.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.20.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.20.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JXg2dwJUmPB9JmtVmdEB16APJ7jurfbY5jnfXpJoRMc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.20.0?package-id=acd4516e0796db91",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
      "version": "v1.20.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.20.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.20.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.20.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JXg2dwJUmPB9JmtVmdEB16APJ7jurfbY5jnfXpJoRMc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1?package-id=85d371e63c52f647",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
      "version": "v1.13.1",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.13.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1?package-id=1019b66c396c7c8a",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
      "version": "v1.13.1",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.13.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3?package-id=10130dbbe281a278",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry",
      "version": "v0.2.3",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/containers\\/azcontainerregistry:v0.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/containers\\/azcontainerregistry:v0.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ldKsKtEIblsgsr6mPwrd9yRntoX6uLz/K89wsldwx/k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3?package-id=fc54fb2628305360",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry",
      "version": "v0.2.3",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/containers\\/azcontainerregistry:v0.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/containers\\/azcontainerregistry:v0.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ldKsKtEIblsgsr6mPwrd9yRntoX6uLz/K89wsldwx/k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.11.2?package-id=28a131223b3fbf98",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
      "version": "v1.11.2",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.11.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.11.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.11.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9iefClla7iYpfYWdzPCRDozdmndjTm8DXdpCzPajMgA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.11.2?package-id=6539a217ca22caaa",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
      "version": "v1.11.2",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.11.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.11.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.11.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9iefClla7iYpfYWdzPCRDozdmndjTm8DXdpCzPajMgA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.6.0?package-id=5bcc8a2a9485355d",
      "type": "library",
      "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XRzhVemXdgvJqCH0sFfrBUTnUJSBrBf7++ypk+twtRs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.6.0?package-id=6535f36298603cb4",
      "type": "library",
      "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XRzhVemXdgvJqCH0sFfrBUTnUJSBrBf7++ypk+twtRs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/burntsushi/toml@v1.5.0?package-id=8f3b6e2d2a2ebc05",
      "type": "library",
      "name": "github.com/BurntSushi/toml",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:BurntSushi:toml:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/BurntSushi/toml@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/burntsushi/toml@v1.5.0?package-id=bbf11af48d583cb2",
      "type": "library",
      "name": "github.com/BurntSushi/toml",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:BurntSushi:toml:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/BurntSushi/toml@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.9.3?package-id=0f78bdb2208033ef",
      "type": "library",
      "name": "github.com/CycloneDX/cyclonedx-go",
      "version": "v0.9.3",
      "cpe": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.9.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.9.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Pyk/lwavPz7AaZNvugKFkdWOm93MzaIyWmBwmBo3aUI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.9.3?package-id=8b28d162c9e543d2",
      "type": "library",
      "name": "github.com/CycloneDX/cyclonedx-go",
      "version": "v0.9.3",
      "cpe": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.9.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.9.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Pyk/lwavPz7AaZNvugKFkdWOm93MzaIyWmBwmBo3aUI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/docker-credential-gcr/v2@v2.1.30?package-id=4aef3bbef3295f23",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/docker-credential-gcr/v2",
      "version": "v2.1.30",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:docker-credential-gcr\\/v2:v2.1.30:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/docker-credential-gcr/v2@v2.1.30",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:docker_credential_gcr\\/v2:v2.1.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LZKiFW/Mmr5ohlGs/2UmNlv+E0sWoa3lXqbJ8ZKwwDY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/docker-credential-gcr/v2@v2.1.30?package-id=5e5b62b0b7aac41b",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/docker-credential-gcr/v2",
      "version": "v2.1.30",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:docker-credential-gcr\\/v2:v2.1.30:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/docker-credential-gcr/v2@v2.1.30",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:docker_credential_gcr\\/v2:v2.1.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LZKiFW/Mmr5ohlGs/2UmNlv+E0sWoa3lXqbJ8ZKwwDY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.29.0?package-id=005eaf5f6f785b7f",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
      "version": "v1.29.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.29.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.29.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UQUsRi8WTzhZntp5313l+CHIAT95ojUI2lpP/ExlZa4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.29.0?package-id=08e2e32e7eeda6a1",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
      "version": "v1.29.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.29.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.29.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UQUsRi8WTzhZntp5313l+CHIAT95ojUI2lpP/ExlZa4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.53.0?package-id=86fa86036bc916a6",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
      "version": "v0.53.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.53.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.53.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.53.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:owcC2UnmsZycprQ5RfRgjydWhuoxg71LUfyiQdijZuM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.53.0?package-id=5af3f0a91e7e4eaf",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
      "version": "v0.53.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.53.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.53.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.53.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:owcC2UnmsZycprQ5RfRgjydWhuoxg71LUfyiQdijZuM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0?package-id=807edd5557ce339b",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
      "version": "v0.53.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.53.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.53.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Ron4zCA/yk6U7WOBXhTJcDpsUBG9npumK6xw2auFltQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0?package-id=9e2df8b8cbfbcd0e",
      "type": "library",
      "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
      "version": "v0.53.0",
      "cpe": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.53.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.53.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Ron4zCA/yk6U7WOBXhTJcDpsUBG9npumK6xw2auFltQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/gval@v1.3.0?package-id=fa04dfa9e0600202",
      "type": "library",
      "name": "github.com/Intevation/gval",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Intevation/gval@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+Ze5sft5MmGbZrHj06NVUbcxCb67l9RaPTLMNr37mjw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/gval@v1.3.0?package-id=8fef081b5857bede",
      "type": "library",
      "name": "github.com/Intevation/gval",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Intevation/gval@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+Ze5sft5MmGbZrHj06NVUbcxCb67l9RaPTLMNr37mjw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/jsonpath@v0.2.1?package-id=800b9161b3399044",
      "type": "library",
      "name": "github.com/Intevation/jsonpath",
      "version": "v0.2.1",
      "cpe": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rINNQJ0Pts5XTFEG+zamtdL7l9uuE1z0FBA+r55Sw+A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/jsonpath@v0.2.1?package-id=68f46ab27e778379",
      "type": "library",
      "name": "github.com/Intevation/jsonpath",
      "version": "v0.2.1",
      "cpe": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rINNQJ0Pts5XTFEG+zamtdL7l9uuE1z0FBA+r55Sw+A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=373de69143de1e83",
      "type": "library",
      "name": "github.com/MakeNowJust/heredoc",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:MakeNowJust:heredoc:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=32e0285da37a56b0",
      "type": "library",
      "name": "github.com/MakeNowJust/heredoc",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:MakeNowJust:heredoc:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=a5e975481a670914",
      "type": "library",
      "name": "github.com/Masterminds/goutils",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=cfea1a7a7144783e",
      "type": "library",
      "name": "github.com/Masterminds/goutils",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=0f2f7d97b7a82780",
      "type": "library",
      "name": "github.com/Masterminds/semver/v3",
      "version": "v3.4.0",
      "cpe": "cpe:2.3:a:Masterminds:semver\\/v3:v3.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=ea40811a75f0c0ef",
      "type": "library",
      "name": "github.com/Masterminds/semver/v3",
      "version": "v3.4.0",
      "cpe": "cpe:2.3:a:Masterminds:semver\\/v3:v3.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=460e4e10ae9f1bb9",
      "type": "library",
      "name": "github.com/Masterminds/sprig/v3",
      "version": "v3.3.0",
      "cpe": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=189410522960049d",
      "type": "library",
      "name": "github.com/Masterminds/sprig/v3",
      "version": "v3.3.0",
      "cpe": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/squirrel@v1.5.4?package-id=e6bbd680042160e9",
      "type": "library",
      "name": "github.com/Masterminds/squirrel",
      "version": "v1.5.4",
      "cpe": "cpe:2.3:a:Masterminds:squirrel:v1.5.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/squirrel@v1.5.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8afzqM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masterminds/squirrel@v1.5.4?package-id=671ef14e1ee64d85",
      "type": "library",
      "name": "github.com/Masterminds/squirrel",
      "version": "v1.5.4",
      "cpe": "cpe:2.3:a:Masterminds:squirrel:v1.5.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Masterminds/squirrel@v1.5.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8afzqM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/nytimes/gziphandler@v1.1.1?package-id=9215d722cae63d1a",
      "type": "library",
      "name": "github.com/NYTimes/gziphandler",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:NYTimes:gziphandler:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/NYTimes/gziphandler@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/nytimes/gziphandler@v1.1.1?package-id=31cd27099a45b74a",
      "type": "library",
      "name": "github.com/NYTimes/gziphandler",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:NYTimes:gziphandler:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/NYTimes/gziphandler@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/go-crypto@v1.3.0?package-id=966c3f3ed582c467",
      "type": "library",
      "name": "github.com/ProtonMail/go-crypto",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:ProtonMail:go-crypto:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ProtonMail:go_crypto:v1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ILq8+Sf5If5DCpHQp4PbZdS1J7HDFRXz/+xKBiRGFrw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/go-crypto@v1.3.0?package-id=c1d9e15ad3f75a95",
      "type": "library",
      "name": "github.com/ProtonMail/go-crypto",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:ProtonMail:go-crypto:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ProtonMail:go_crypto:v1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ILq8+Sf5If5DCpHQp4PbZdS1J7HDFRXz/+xKBiRGFrw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=bcfd29e91fe7dd2f",
      "type": "library",
      "name": "github.com/VividCortex/ewma",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/VividCortex/ewma@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=861d50ed55ebc767",
      "type": "library",
      "name": "github.com/VividCortex/ewma",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/VividCortex/ewma@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=ce5e0f6636a20604",
      "type": "library",
      "name": "github.com/agext/levenshtein",
      "version": "v1.2.3",
      "cpe": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=007674815f5a2472",
      "type": "library",
      "name": "github.com/agext/levenshtein",
      "version": "v1.2.3",
      "cpe": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=91c1d7221fdeb338",
      "type": "library",
      "name": "github.com/agnivade/levenshtein",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=85cfeb8f3b2bd1e2",
      "type": "library",
      "name": "github.com/agnivade/levenshtein",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alecthomas/chroma@v0.10.0?package-id=f28e419bd02b3304",
      "type": "library",
      "name": "github.com/alecthomas/chroma",
      "version": "v0.10.0",
      "cpe": "cpe:2.3:a:alecthomas:chroma:v0.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alecthomas/chroma@v0.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7XDcGkCQopCNKjZHfYrNLraA+M7e0fMiJ/Mfikbfjek="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alecthomas/chroma@v0.10.0?package-id=199a89b2ea71d41a",
      "type": "library",
      "name": "github.com/alecthomas/chroma",
      "version": "v0.10.0",
      "cpe": "cpe:2.3:a:alecthomas:chroma:v0.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alecthomas/chroma@v0.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7XDcGkCQopCNKjZHfYrNLraA+M7e0fMiJ/Mfikbfjek="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092?package-id=59088aa66d542772",
      "type": "library",
      "name": "github.com/anchore/go-struct-converter",
      "version": "v0.0.0-20221118182256-c68fdcfa2092",
      "cpe": "cpe:2.3:a:anchore:go-struct-converter:v0.0.0-20221118182256-c68fdcfa2092:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anchore:go_struct_converter:v0.0.0-20221118182256-c68fdcfa2092:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aM1rlcoLz8y5B2r4tTLMiVTrMtpfY0O8EScKJxaSaEc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092?package-id=36bcd063eeb1e7a9",
      "type": "library",
      "name": "github.com/anchore/go-struct-converter",
      "version": "v0.0.0-20221118182256-c68fdcfa2092",
      "cpe": "cpe:2.3:a:anchore:go-struct-converter:v0.0.0-20221118182256-c68fdcfa2092:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:anchore:go_struct_converter:v0.0.0-20221118182256-c68fdcfa2092:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aM1rlcoLz8y5B2r4tTLMiVTrMtpfY0O8EScKJxaSaEc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0?package-id=99cceecb454cdd67",
      "type": "library",
      "name": "github.com/apparentlymart/go-cidr",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:apparentlymart:go-cidr:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apparentlymart:go_cidr:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2mAhrMoF+nhXqxTzSZMUzDHkLjmIHC+Zzn4tdgBZjnU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0?package-id=ebdb10be8ec3d0f9",
      "type": "library",
      "name": "github.com/apparentlymart/go-cidr",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:apparentlymart:go-cidr:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apparentlymart:go_cidr:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2mAhrMoF+nhXqxTzSZMUzDHkLjmIHC+Zzn4tdgBZjnU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0?package-id=71a84370619d0d3e",
      "type": "library",
      "name": "github.com/apparentlymart/go-textseg/v15",
      "version": "v15.0.0",
      "cpe": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0?package-id=271623c120dad9d1",
      "type": "library",
      "name": "github.com/apparentlymart/go-textseg/v15",
      "version": "v15.0.0",
      "cpe": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce?package-id=0c7fdbf8a863965b",
      "type": "library",
      "name": "github.com/aquasecurity/go-gem-version",
      "version": "v0.0.0-20201115065557-8eed6fe000ce",
      "cpe": "cpe:2.3:a:aquasecurity:go-gem-version:v0.0.0-20201115065557-8eed6fe000ce:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_gem_version:v0.0.0-20201115065557-8eed6fe000ce:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QgBRgJvtEOBtUXilDb1MLi1p1MWoyFDXAu5DEUl5nwM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce?package-id=17898244faf0e19b",
      "type": "library",
      "name": "github.com/aquasecurity/go-gem-version",
      "version": "v0.0.0-20201115065557-8eed6fe000ce",
      "cpe": "cpe:2.3:a:aquasecurity:go-gem-version:v0.0.0-20201115065557-8eed6fe000ce:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_gem_version:v0.0.0-20201115065557-8eed6fe000ce:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QgBRgJvtEOBtUXilDb1MLi1p1MWoyFDXAu5DEUl5nwM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2?package-id=7a1f74c1b44026d8",
      "type": "library",
      "name": "github.com/aquasecurity/go-npm-version",
      "version": "v0.0.2",
      "cpe": "cpe:2.3:a:aquasecurity:go-npm-version:v0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_npm_version:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6sNIaeW4Hw8Xg51nPoD3VSo/5qmFSu0VL809iehEOvc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2?package-id=3c0c829e3f59ad0d",
      "type": "library",
      "name": "github.com/aquasecurity/go-npm-version",
      "version": "v0.0.2",
      "cpe": "cpe:2.3:a:aquasecurity:go-npm-version:v0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_npm_version:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6sNIaeW4Hw8Xg51nPoD3VSo/5qmFSu0VL809iehEOvc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1?package-id=62fe86eaa402e8d1",
      "type": "library",
      "name": "github.com/aquasecurity/go-pep440-version",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8VKKQtH2aV61+0hovZS3T//rUF+6GDn18paFTVS0h0M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1?package-id=db5410775d03e929",
      "type": "library",
      "name": "github.com/aquasecurity/go-pep440-version",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8VKKQtH2aV61+0hovZS3T//rUF+6GDn18paFTVS0h0M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1?package-id=6157434e956f5974",
      "type": "library",
      "name": "github.com/aquasecurity/go-version",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4cNl516agK0TCn5F7mmYN+xVs1E3S45LkgZk3cbaW2E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1?package-id=2a25268585d11a17",
      "type": "library",
      "name": "github.com/aquasecurity/go-version",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4cNl516agK0TCn5F7mmYN+xVs1E3S45LkgZk3cbaW2E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10?package-id=67322fd67a117672",
      "type": "library",
      "name": "github.com/aquasecurity/iamgo",
      "version": "v0.0.10",
      "cpe": "cpe:2.3:a:aquasecurity:iamgo:v0.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:t/HG/MI1eSephztDc+Rzh/YfgEa+NqgYRSfr6pHdSCQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10?package-id=5a296f2bc349eac5",
      "type": "library",
      "name": "github.com/aquasecurity/iamgo",
      "version": "v0.0.10",
      "cpe": "cpe:2.3:a:aquasecurity:iamgo:v0.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:t/HG/MI1eSephztDc+Rzh/YfgEa+NqgYRSfr6pHdSCQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8?package-id=3ecd14fc09be4361",
      "type": "library",
      "name": "github.com/aquasecurity/jfather",
      "version": "v0.0.8",
      "cpe": "cpe:2.3:a:aquasecurity:jfather:v0.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tUjPoLGdlkJU0qE7dSzd1MHk2nQFNPR0ZfF+6shaExE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8?package-id=f9070cb41a8b496e",
      "type": "library",
      "name": "github.com/aquasecurity/jfather",
      "version": "v0.0.8",
      "cpe": "cpe:2.3:a:aquasecurity:jfather:v0.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tUjPoLGdlkJU0qE7dSzd1MHk2nQFNPR0ZfF+6shaExE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/table@v1.11.0?package-id=dfa0c3deb7c4d2da",
      "type": "library",
      "name": "github.com/aquasecurity/table",
      "version": "v1.11.0",
      "cpe": "cpe:2.3:a:aquasecurity:table:v1.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/table@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SzgCAv7dZcv/gyAyzxorS6OgEk7w/WU5iT2pStIkpl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/table@v1.11.0?package-id=e00af4e4da3c9d6c",
      "type": "library",
      "name": "github.com/aquasecurity/table",
      "version": "v1.11.0",
      "cpe": "cpe:2.3:a:aquasecurity:table:v1.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/table@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SzgCAv7dZcv/gyAyzxorS6OgEk7w/WU5iT2pStIkpl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/tml@v0.6.1?package-id=f57f29746e8867da",
      "type": "library",
      "name": "github.com/aquasecurity/tml",
      "version": "v0.6.1",
      "cpe": "cpe:2.3:a:aquasecurity:tml:v0.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/tml@v0.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y2ZlGSfrhnn7t4ZJ/0rotuH+v5Jgv6BDDO5jB6A9gwo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/tml@v0.6.1?package-id=fb9249b015d6b028",
      "type": "library",
      "name": "github.com/aquasecurity/tml",
      "version": "v0.6.1",
      "cpe": "cpe:2.3:a:aquasecurity:tml:v0.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/tml@v0.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y2ZlGSfrhnn7t4ZJ/0rotuH+v5Jgv6BDDO5jB6A9gwo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy@v0.68.2?package-id=4e345b127e1e1338",
      "type": "library",
      "name": "github.com/aquasecurity/trivy",
      "version": "v0.68.2",
      "cpe": "cpe:2.3:a:aquasecurity:trivy:v0.68.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy@v0.68.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zHkcBgAxVf7uNbqkAy6Av9DTkK++/S9GM8QrCLYBIdU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy@v0.68.2?package-id=15a7bd7efeab552a",
      "type": "library",
      "name": "github.com/aquasecurity/trivy",
      "version": "v0.68.2",
      "cpe": "cpe:2.3:a:aquasecurity:trivy:v0.68.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy@v0.68.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zHkcBgAxVf7uNbqkAy6Av9DTkK++/S9GM8QrCLYBIdU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169?package-id=ddc9d601387b1455",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-checks",
      "version": "v1.11.3-0.20250604022615-9a7efa7c9169",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-checks:v1.11.3-0.20250604022615-9a7efa7c9169:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_checks:v1.11.3-0.20250604022615-9a7efa7c9169:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TckzIxUX7lZaU9f2lNxCN0noYYP8fzmSQf6a4JdV83w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169?package-id=f223cfdeb932c159",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-checks",
      "version": "v1.11.3-0.20250604022615-9a7efa7c9169",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-checks:v1.11.3-0.20250604022615-9a7efa7c9169:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_checks:v1.11.3-0.20250604022615-9a7efa7c9169:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TckzIxUX7lZaU9f2lNxCN0noYYP8fzmSQf6a4JdV83w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a?package-id=e3d7ef75b2fe60c9",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-db",
      "version": "v0.0.0-20250929072116-eba1ced2340a",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-db:v0.0.0-20250929072116-eba1ced2340a:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_db:v0.0.0-20250929072116-eba1ced2340a:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wmvjq3zQGsZ8Wlqh75zvujh7LZNTXU4YoEf8tyL1LoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a?package-id=ba618a8fbd1828af",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-db",
      "version": "v0.0.0-20250929072116-eba1ced2340a",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-db:v0.0.0-20250929072116-eba1ced2340a:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_db:v0.0.0-20250929072116-eba1ced2340a:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wmvjq3zQGsZ8Wlqh75zvujh7LZNTXU4YoEf8tyL1LoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48?package-id=0fd48b4cdf4e4bf9",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-java-db",
      "version": "v0.0.0-20240109071736-184bd7481d48",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-java-db:v0.0.0-20240109071736-184bd7481d48:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_java_db:v0.0.0-20240109071736-184bd7481d48:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JVgBIuIYbwG+ekC5lUHUpGJboPYiCcxiz06RCtz8neI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48?package-id=233a8b4f6a502f8a",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-java-db",
      "version": "v0.0.0-20240109071736-184bd7481d48",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-java-db:v0.0.0-20240109071736-184bd7481d48:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_java_db:v0.0.0-20240109071736-184bd7481d48:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JVgBIuIYbwG+ekC5lUHUpGJboPYiCcxiz06RCtz8neI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1?package-id=548d2969c332ca80",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-kubernetes",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-kubernetes:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_kubernetes:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bSErQcavKXDh7XMwbGX7Vy//jR5+xhe/bOgfn9G+9lQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1?package-id=4ca4655dd847622c",
      "type": "library",
      "name": "github.com/aquasecurity/trivy-kubernetes",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:aquasecurity:trivy-kubernetes:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aquasecurity:trivy_kubernetes:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bSErQcavKXDh7XMwbGX7Vy//jR5+xhe/bOgfn9G+9lQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=c7b48cf38229a756",
      "type": "library",
      "name": "github.com/asaskevich/govalidator",
      "version": "v0.0.0-20230301143203-a9d515a09cc2",
      "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=7548af3b9a538211",
      "type": "library",
      "name": "github.com/asaskevich/govalidator",
      "version": "v0.0.0-20230301143203-a9d515a09cc2",
      "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0?package-id=1e25ae11d8799f5b",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2",
      "version": "v1.40.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.40.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.40.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/WMUA0kjhZExjOQN2z3oLALDREea1A7TobfuiBrKlwc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0?package-id=3c383d04eeaf2dcd",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2",
      "version": "v1.40.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.40.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.40.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/WMUA0kjhZExjOQN2z3oLALDREea1A7TobfuiBrKlwc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3?package-id=9716ca44d8e61969",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
      "version": "v1.7.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DHctwEM8P8iTXFxC/QK0MRjwEpWQeM9yzidCRjldUz0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3?package-id=302966cb5ea4c259",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
      "version": "v1.7.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DHctwEM8P8iTXFxC/QK0MRjwEpWQeM9yzidCRjldUz0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0?package-id=34918793ffd4eaef",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/config",
      "version": "v1.32.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:T5WWJYnam9SzBLbsVYDu2HscLDe+GU1AUJtfcDAc/vA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0?package-id=13ce0cbf7be27b52",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/config",
      "version": "v1.32.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:T5WWJYnam9SzBLbsVYDu2HscLDe+GU1AUJtfcDAc/vA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0?package-id=d61d4a4e454e4338",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/credentials",
      "version": "v1.19.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7zm+ez+qEqLaNsCSRaistkvJRJv8sByDOVuCnyHbP7M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0?package-id=34b900428329015c",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/credentials",
      "version": "v1.19.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7zm+ez+qEqLaNsCSRaistkvJRJv8sByDOVuCnyHbP7M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14?package-id=e9da7c89083101ee",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
      "version": "v1.18.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WZVR5DbDgxzA0BJeudId89Kmgy6DIU4ORpxwsVHz0qA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14?package-id=0daf3abf99853ead",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
      "version": "v1.18.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WZVR5DbDgxzA0BJeudId89Kmgy6DIU4ORpxwsVHz0qA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14?package-id=13ab7c7280765c57",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
      "version": "v1.4.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PZHqQACxYb8mYgms4RZbhZG0a7dPW06xOjmaH0EJC/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14?package-id=55b2d05dd811976c",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
      "version": "v1.4.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PZHqQACxYb8mYgms4RZbhZG0a7dPW06xOjmaH0EJC/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14?package-id=26ef868547c243ed",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
      "version": "v2.7.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bOS19y6zlJwagBfHxs0ESzr1XCOU2KXJCWcq3E2vfjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14?package-id=2e1ee930d6e7a9fc",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
      "version": "v2.7.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bOS19y6zlJwagBfHxs0ESzr1XCOU2KXJCWcq3E2vfjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4?package-id=0887efbd2bacfc48",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
      "version": "v1.8.4",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/ini:v1.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/ini:v1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WKuaxf++XKWlHWu9ECbMlha8WOEGm0OUEZqm4K/Gcfk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4?package-id=ea72496dd1a4b14e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
      "version": "v1.8.4",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/ini:v1.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/ini:v1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WKuaxf++XKWlHWu9ECbMlha8WOEGm0OUEZqm4K/Gcfk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14?package-id=a4c6a6c08ffeba1d",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
      "version": "v1.4.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ITi7qiDSv/mSGDSWNpZ4k4Ve0DQR6Ug2SJQ8zEHoDXg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14?package-id=70779a5ec055fcca",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
      "version": "v1.4.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ITi7qiDSv/mSGDSWNpZ4k4Ve0DQR6Ug2SJQ8zEHoDXg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1?package-id=6d9ea12959ce78f7",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ebs",
      "version": "v1.22.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ebs:v1.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ebs:v1.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SeDJWG4pmye+/aO6k+zt9clPTUy1MXqUmkW8rbAddQg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1?package-id=37a102b5b05d7c12",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ebs",
      "version": "v1.22.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ebs:v1.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ebs:v1.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SeDJWG4pmye+/aO6k+zt9clPTUy1MXqUmkW8rbAddQg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0?package-id=beacef30ada54e66",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
      "version": "v1.273.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ec2:v1.273.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ec2:v1.273.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lJZflraZ8ddloz8bA2dX9ukc4mkLQFoYwZlzG7GLgWk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0?package-id=74a273f6195fdca6",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
      "version": "v1.273.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ec2:v1.273.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ec2:v1.273.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lJZflraZ8ddloz8bA2dX9ukc4mkLQFoYwZlzG7GLgWk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1?package-id=bfd2d44d39d72649",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
      "version": "v1.53.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.53.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.53.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mLG+iEEtdrS1+DSNqt+nC/jWlXc/GRSpn1AUPhMYUwk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1?package-id=de8efe262c91ffc5",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
      "version": "v1.53.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.53.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.53.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mLG+iEEtdrS1+DSNqt+nC/jWlXc/GRSpn1AUPhMYUwk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3?package-id=e64aa020c5c712a9",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
      "version": "v1.13.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x2Ibm/Af8Fi+BH+Hsn9TXGdT+hKbDd5XOTZxTMxDk7o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3?package-id=42d1f06931272848",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
      "version": "v1.13.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x2Ibm/Af8Fi+BH+Hsn9TXGdT+hKbDd5XOTZxTMxDk7o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5?package-id=cff7cfb26727dd75",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
      "version": "v1.9.5",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.9.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.9.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Hjkh7kE6D81PgrHlE/m9gx+4TyyeLHuY8xJs7yXN5C4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5?package-id=2615f276adcc4729",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
      "version": "v1.9.5",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.9.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.9.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Hjkh7kE6D81PgrHlE/m9gx+4TyyeLHuY8xJs7yXN5C4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14?package-id=cfabd912ddeffb8e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
      "version": "v1.13.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FIouAnCE46kyYqyhs0XEBDFFSREtdnr8HQuLPQPLCrY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14?package-id=0d703357407521a6",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
      "version": "v1.13.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FIouAnCE46kyYqyhs0XEBDFFSREtdnr8HQuLPQPLCrY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14?package-id=c6612099bffdf4a5",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
      "version": "v1.19.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FzQE21lNtUor0Fb7QNgnEyiRCBlolLTX/Z1j65S7teM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14?package-id=739d695ef9cf1e64",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
      "version": "v1.19.14",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FzQE21lNtUor0Fb7QNgnEyiRCBlolLTX/Z1j65S7teM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0?package-id=9ca568f6c59705b2",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/s3",
      "version": "v1.92.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.92.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.92.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8FshVvnV2sr9kOSAbOnc/vwVmmAwMjOedKH6JW2ddPM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0?package-id=0cebf943a595535e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/s3",
      "version": "v1.92.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.92.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.92.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8FshVvnV2sr9kOSAbOnc/vwVmmAwMjOedKH6JW2ddPM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1?package-id=5dc41fbf7cff38b3",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/signin",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BDgIUYGEo5TkayOWv/oBLPphWwNm/A91AebUjAu5L5g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1?package-id=6d32e0d25a95eab2",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/signin",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BDgIUYGEo5TkayOWv/oBLPphWwNm/A91AebUjAu5L5g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4?package-id=dfd3a4c36ba4ea1a",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sso",
      "version": "v1.30.4",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.30.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.30.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U//SlnkE1wOQiIImxzdY5PXat4Wq+8rlfVEw4Y7J8as="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4?package-id=0794f517da6da7b1",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sso",
      "version": "v1.30.4",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.30.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.30.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U//SlnkE1wOQiIImxzdY5PXat4Wq+8rlfVEw4Y7J8as="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8?package-id=15abf3049527a473",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
      "version": "v1.35.8",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.35.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.35.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MvlNs/f+9eM0mOjD9JzBUbf5jghyTk3p+O9yHMXX94Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8?package-id=84dddd53ae5f6902",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
      "version": "v1.35.8",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.35.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.35.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MvlNs/f+9eM0mOjD9JzBUbf5jghyTk3p+O9yHMXX94Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1?package-id=9c54b92340db5d7e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sts",
      "version": "v1.41.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.41.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GdGmKtG+/Krag7VfyOXV17xjTCz0i9NT+JnqLTOI5nA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1?package-id=afe4b3a562769e63",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sts",
      "version": "v1.41.1",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.41.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GdGmKtG+/Krag7VfyOXV17xjTCz0i9NT+JnqLTOI5nA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.23.2?package-id=b6fb03437ed7ff18",
      "type": "library",
      "name": "github.com/aws/smithy-go",
      "version": "v1.23.2",
      "cpe": "cpe:2.3:a:aws:smithy-go:v1.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/smithy-go@v1.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:smithy_go:v1.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Crv0eatJUQhaManss33hS5r40CG3ZFH+21XSkqMrIUM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.23.2?package-id=eb0c044b0632ccc7",
      "type": "library",
      "name": "github.com/aws/smithy-go",
      "version": "v1.23.2",
      "cpe": "cpe:2.3:a:aws:smithy-go:v1.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/smithy-go@v1.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:smithy_go:v1.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Crv0eatJUQhaManss33hS5r40CG3ZFH+21XSkqMrIUM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=16fdc9471f6401a4",
      "type": "library",
      "name": "github.com/beorn7/perks",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=646c94003d342aeb",
      "type": "library",
      "name": "github.com/beorn7/perks",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d?package-id=a5b1757512098910",
      "type": "library",
      "name": "github.com/bgentry/go-netrc",
      "version": "v0.0.0-20140422174119-9fd32a8b3d3d",
      "cpe": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d?package-id=a7ccfca8a1741ee1",
      "type": "library",
      "name": "github.com/bgentry/go-netrc",
      "version": "v0.0.0-20140422174119-9fd32a8b3d3d",
      "cpe": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c?package-id=53e3dd7a189cc2b4",
      "type": "library",
      "name": "github.com/bitnami/go-version",
      "version": "v0.0.0-20231130084017-bb00604d650c",
      "cpe": "cpe:2.3:a:bitnami:go-version:v0.0.0-20231130084017-bb00604d650c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bitnami:go_version:v0.0.0-20231130084017-bb00604d650c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C4UZIaS+HAw+X6jGUsoP2ZbM99PuqhCttjomg1yhNAI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c?package-id=957c52fc3f2c0723",
      "type": "library",
      "name": "github.com/bitnami/go-version",
      "version": "v0.0.0-20231130084017-bb00604d650c",
      "cpe": "cpe:2.3:a:bitnami:go-version:v0.0.0-20231130084017-bb00604d650c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bitnami:go_version:v0.0.0-20231130084017-bb00604d650c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C4UZIaS+HAw+X6jGUsoP2ZbM99PuqhCttjomg1yhNAI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=b623559a981406b9",
      "type": "library",
      "name": "github.com/blang/semver",
      "version": "v3.5.1+incompatible",
      "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=70894792ad4fcd16",
      "type": "library",
      "name": "github.com/blang/semver",
      "version": "v3.5.1+incompatible",
      "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=5a1a2cd45d010469",
      "type": "library",
      "name": "github.com/blang/semver/v4",
      "version": "v4.0.0",
      "cpe": "cpe:2.3:a:blang:semver\\/v4:v4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/blang/semver/v4@v4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=687941d526ac598c",
      "type": "library",
      "name": "github.com/blang/semver/v4",
      "version": "v4.0.0",
      "cpe": "cpe:2.3:a:blang:semver\\/v4:v4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/blang/semver/v4@v4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1?package-id=c41da2747d6b8fe4",
      "type": "library",
      "name": "github.com/bmatcuk/doublestar/v4",
      "version": "v4.9.1",
      "cpe": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X8jg9rRZmJd4yRy7ZeNDRnM+T3ZfHv15JiBJ/avrEXE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1?package-id=4c116ab9a1f2d2a9",
      "type": "library",
      "name": "github.com/bmatcuk/doublestar/v4",
      "version": "v4.9.1",
      "cpe": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X8jg9rRZmJd4yRy7ZeNDRnM+T3ZfHv15JiBJ/avrEXE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/briandowns/spinner@v1.23.0?package-id=24dafff7466bc941",
      "type": "library",
      "name": "github.com/briandowns/spinner",
      "version": "v1.23.0",
      "cpe": "cpe:2.3:a:briandowns:spinner:v1.23.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/briandowns/spinner@v1.23.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/briandowns/spinner@v1.23.0?package-id=d51a23d23f8bb270",
      "type": "library",
      "name": "github.com/briandowns/spinner",
      "version": "v1.23.0",
      "cpe": "cpe:2.3:a:briandowns:spinner:v1.23.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/briandowns/spinner@v1.23.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343?package-id=739945d3a29994f9",
      "type": "library",
      "name": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem",
      "version": "v0.0.0-20260613212014-4edd3409b343",
      "cpe": "cpe:2.3:a:cdxgen:cdxgen-plugins-bin\\/thirdparty\\/golem:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:cdxgen_plugins_bin\\/thirdparty\\/golem:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/golem/golem-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343?package-id=2e6ff937052ac49d",
      "type": "library",
      "name": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem",
      "version": "v0.0.0-20260613212014-4edd3409b343",
      "cpe": "cpe:2.3:a:cdxgen:cdxgen-plugins-bin\\/thirdparty\\/golem:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:cdxgen_plugins_bin\\/thirdparty\\/golem:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/golem/golem-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343?package-id=0da16ec8e84728db",
      "type": "library",
      "name": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector",
      "version": "v0.0.0-20260613212014-4edd3409b343",
      "cpe": "cpe:2.3:a:cdxgen:cdxgen-plugins-bin\\/thirdparty\\/trustinspector:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:cdxgen_plugins_bin\\/thirdparty\\/trustinspector:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trustinspector/trustinspector-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343?package-id=04fc77c0ab6b7e9c",
      "type": "library",
      "name": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector",
      "version": "v0.0.0-20260613212014-4edd3409b343",
      "cpe": "cpe:2.3:a:cdxgen:cdxgen-plugins-bin\\/thirdparty\\/trustinspector:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:cdxgen_plugins_bin\\/thirdparty\\/trustinspector:v0.0.0-20260613212014-4edd3409b343:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trustinspector/trustinspector-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cdxgen/safer-exec/go@v0.0.0-20260615211941-1d8adbd49f0c?package-id=b062f603d261e983",
      "type": "library",
      "name": "github.com/cdxgen/safer-exec/go",
      "version": "v0.0.0-20260615211941-1d8adbd49f0c",
      "cpe": "cpe:2.3:a:cdxgen:safer-exec\\/go:v0.0.0-20260615211941-1d8adbd49f0c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cdxgen/safer-exec/go@v0.0.0-20260615211941-1d8adbd49f0c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdxgen:safer_exec\\/go:v0.0.0-20260615211941-1d8adbd49f0c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/bin/safer-exec-rt"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.26.4"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/safer-exec/go"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=7064151c8c6bbc41",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v4",
      "version": "v4.3.0",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=eccc4f498e8e0ffb",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v4",
      "version": "v4.3.0",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=c236809d984a7a0e",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v5",
      "version": "v5.0.3",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=114ece1955766bcd",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v5",
      "version": "v5.0.3",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=518fac55782a4cb6",
      "type": "library",
      "name": "github.com/cespare/xxhash/v2",
      "version": "v2.3.0",
      "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=a0b61162bba83a61",
      "type": "library",
      "name": "github.com/cespare/xxhash/v2",
      "version": "v2.3.0",
      "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=493e6d2c33f9c526",
      "type": "library",
      "name": "github.com/chai2010/gettext-go",
      "version": "v1.0.2",
      "cpe": "cpe:2.3:a:chai2010:gettext-go:v1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chai2010:gettext_go:v1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1Lwwip6Q2QGsAdl/ZKPCwTe9fe0CjlUbqj5bFNSjIRk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=1bbf71669b36fa0d",
      "type": "library",
      "name": "github.com/chai2010/gettext-go",
      "version": "v1.0.2",
      "cpe": "cpe:2.3:a:chai2010:gettext-go:v1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chai2010:gettext_go:v1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1Lwwip6Q2QGsAdl/ZKPCwTe9fe0CjlUbqj5bFNSjIRk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=d9b6bfa115d1ae0a",
      "type": "library",
      "name": "github.com/cheggaaa/pb/v3",
      "version": "v3.1.7",
      "cpe": "cpe:2.3:a:cheggaaa:pb\\/v3:v3.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2FsIW307kt7A/rz/ZI2lvPO+v3wKazzE4K/0LtTWsOI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=0c684a680efaa5e3",
      "type": "library",
      "name": "github.com/cheggaaa/pb/v3",
      "version": "v3.1.7",
      "cpe": "cpe:2.3:a:cheggaaa:pb\\/v3:v3.1.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2FsIW307kt7A/rz/ZI2lvPO+v3wKazzE4K/0LtTWsOI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cilium/ebpf@v0.17.3?package-id=8631b3ab807a2660",
      "type": "library",
      "name": "github.com/cilium/ebpf",
      "version": "v0.17.3",
      "cpe": "cpe:2.3:a:cilium:ebpf:v0.17.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cilium/ebpf@v0.17.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/bin/safer-exec-rt"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.26.4"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FnP4r16PWYSE4ux6zN+//jMcW4nMVRvuTLVTvCjyyjg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/safer-exec/go"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cloudflare/circl@v1.6.1?package-id=fbdda792b7df3683",
      "type": "library",
      "name": "github.com/cloudflare/circl",
      "version": "v1.6.1",
      "cpe": "cpe:2.3:a:cloudflare:circl:v1.6.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cloudflare/circl@v1.6.1?package-id=be0d44d50fcba766",
      "type": "library",
      "name": "github.com/cloudflare/circl",
      "version": "v1.6.1",
      "cpe": "cpe:2.3:a:cloudflare:circl:v1.6.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443?package-id=215f98c31e7f62b4",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20250501225837-2ac532fd4443",
      "cpe": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20250501225837-2ac532fd4443:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aQ3y1lwWyqYPiWZThqv1aFbZMiM9vblcSArJRf2Irls="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443?package-id=6b2e0dbe750d7da4",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20250501225837-2ac532fd4443",
      "cpe": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20250501225837-2ac532fd4443:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aQ3y1lwWyqYPiWZThqv1aFbZMiM9vblcSArJRf2Irls="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd@v1.7.29?package-id=ea1e14337084f132",
      "type": "library",
      "name": "github.com/containerd/containerd",
      "version": "v1.7.29",
      "cpe": "cpe:2.3:a:containerd:containerd:v1.7.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd@v1.7.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:90fWABQsaN9mJhGkoVnuzEY+o1XDPbg9BTC9QTAHnuE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd@v1.7.29?package-id=3087294a027a4b9e",
      "type": "library",
      "name": "github.com/containerd/containerd",
      "version": "v1.7.29",
      "cpe": "cpe:2.3:a:containerd:containerd:v1.7.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd@v1.7.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:90fWABQsaN9mJhGkoVnuzEY+o1XDPbg9BTC9QTAHnuE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd/api@v1.10.0?package-id=569888ecd1a1b8b0",
      "type": "library",
      "name": "github.com/containerd/containerd/api",
      "version": "v1.10.0",
      "cpe": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5n0oHYVBwN4VhoX9fFykCV9dF1/BvAXeg2F8W6UYq1o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd/api@v1.10.0?package-id=92af84f93c3cdc35",
      "type": "library",
      "name": "github.com/containerd/containerd/api",
      "version": "v1.10.0",
      "cpe": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5n0oHYVBwN4VhoX9fFykCV9dF1/BvAXeg2F8W6UYq1o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd/v2@v2.2.0?package-id=f023f50a0679ea88",
      "type": "library",
      "name": "github.com/containerd/containerd/v2",
      "version": "v2.2.0",
      "cpe": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd/v2@v2.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:K7TqcXy+LnFmZaui2DgHsnp2gAHhVNWYaHlx7HXfys8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/containerd/v2@v2.2.0?package-id=5099f1f78427a2fa",
      "type": "library",
      "name": "github.com/containerd/containerd/v2",
      "version": "v2.2.0",
      "cpe": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/containerd/v2@v2.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:K7TqcXy+LnFmZaui2DgHsnp2gAHhVNWYaHlx7HXfys8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/continuity@v0.4.5?package-id=f04c5ec4b9f644b9",
      "type": "library",
      "name": "github.com/containerd/continuity",
      "version": "v0.4.5",
      "cpe": "cpe:2.3:a:containerd:continuity:v0.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/continuity@v0.4.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/continuity@v0.4.5?package-id=124fecb2bc24f168",
      "type": "library",
      "name": "github.com/containerd/continuity",
      "version": "v0.4.5",
      "cpe": "cpe:2.3:a:containerd:continuity:v0.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/continuity@v0.4.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=7619c65218faa245",
      "type": "library",
      "name": "github.com/containerd/errdefs",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=25e5490a9352c6af",
      "type": "library",
      "name": "github.com/containerd/errdefs",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=29e8a66555b08850",
      "type": "library",
      "name": "github.com/containerd/errdefs/pkg",
      "version": "v0.3.0",
      "cpe": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=3d5235bac8acc158",
      "type": "library",
      "name": "github.com/containerd/errdefs/pkg",
      "version": "v0.3.0",
      "cpe": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/fifo@v1.1.0?package-id=2133a25cb7ff878f",
      "type": "library",
      "name": "github.com/containerd/fifo",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/fifo@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4I2mbh5stb1u6ycIABlBw9zgtlK8viPI9QkQNRQEEmY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/fifo@v1.1.0?package-id=b989b61d78ba7d0e",
      "type": "library",
      "name": "github.com/containerd/fifo",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/fifo@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4I2mbh5stb1u6ycIABlBw9zgtlK8viPI9QkQNRQEEmY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/log@v0.1.0?package-id=4ca5314488a77f9b",
      "type": "library",
      "name": "github.com/containerd/log",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/log@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/log@v0.1.0?package-id=2e3f4008aa6817d5",
      "type": "library",
      "name": "github.com/containerd/log",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/log@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2?package-id=c6246faa0c6fab70",
      "type": "library",
      "name": "github.com/containerd/platforms",
      "version": "v1.0.0-rc.2",
      "cpe": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0SPgaNZPVWGEi4grZdV8VRYQn78y+nm6acgLGv/QzE4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2?package-id=afb539281f0c99ce",
      "type": "library",
      "name": "github.com/containerd/platforms",
      "version": "v1.0.0-rc.2",
      "cpe": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0SPgaNZPVWGEi4grZdV8VRYQn78y+nm6acgLGv/QzE4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/plugin@v1.0.0?package-id=1338ccf379de2f5d",
      "type": "library",
      "name": "github.com/containerd/plugin",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:containerd:plugin:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/plugin@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:c8Kf1TNl6+e2TtMHZt+39yAPDbouRH9WAToRjex483Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/plugin@v1.0.0?package-id=578d8d080552c59a",
      "type": "library",
      "name": "github.com/containerd/plugin",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:containerd:plugin:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/plugin@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:c8Kf1TNl6+e2TtMHZt+39yAPDbouRH9WAToRjex483Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0?package-id=e5cb92459d6e3242",
      "type": "library",
      "name": "github.com/containerd/stargz-snapshotter/estargz",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+TyQIsR/zSFI1Rm31EQBwpAA1ovYgIKHy7kctL3sLcE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0?package-id=fa5a254d6a200a1e",
      "type": "library",
      "name": "github.com/containerd/stargz-snapshotter/estargz",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+TyQIsR/zSFI1Rm31EQBwpAA1ovYgIKHy7kctL3sLcE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/ttrpc@v1.2.7?package-id=3ffbaebf636ac874",
      "type": "library",
      "name": "github.com/containerd/ttrpc",
      "version": "v1.2.7",
      "cpe": "cpe:2.3:a:containerd:ttrpc:v1.2.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/ttrpc@v1.2.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qIrroQvuOL9HQ1X6KHe2ohc7p+HP/0VE6XPU7elJRqQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/ttrpc@v1.2.7?package-id=5b5be5bd3eb0b18c",
      "type": "library",
      "name": "github.com/containerd/ttrpc",
      "version": "v1.2.7",
      "cpe": "cpe:2.3:a:containerd:ttrpc:v1.2.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/ttrpc@v1.2.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qIrroQvuOL9HQ1X6KHe2ohc7p+HP/0VE6XPU7elJRqQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3?package-id=d0058883bbbb5125",
      "type": "library",
      "name": "github.com/containerd/typeurl/v2",
      "version": "v2.2.3",
      "cpe": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yNA/94zxWdvYACdYO8zofhrTVuQY73fFU1y++dYSw40="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3?package-id=8222a0b6aff65b2f",
      "type": "library",
      "name": "github.com/containerd/typeurl/v2",
      "version": "v2.2.3",
      "cpe": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yNA/94zxWdvYACdYO8zofhrTVuQY73fFU1y++dYSw40="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46?package-id=d3ffa52073e26532",
      "type": "library",
      "name": "github.com/cyberphone/json-canonicalization",
      "version": "v0.0.0-20231011164504-785e29786b46",
      "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20231011164504-785e29786b46:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20231011164504-785e29786b46:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2Dx4IHfC1yHWI12AxQDJM1QbRCDfk6M+blLzlZCXdrc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46?package-id=5d7164f431ac0599",
      "type": "library",
      "name": "github.com/cyberphone/json-canonicalization",
      "version": "v0.0.0-20231011164504-785e29786b46",
      "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20231011164504-785e29786b46:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20231011164504-785e29786b46:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2Dx4IHfC1yHWI12AxQDJM1QbRCDfk6M+blLzlZCXdrc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0?package-id=4338705f6fc303c1",
      "type": "library",
      "name": "github.com/cyphar/filepath-securejoin",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BtGB77njd6SVO6VztOHfPxKitJvd/VPT+OFBFMOi1Is="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0?package-id=db5d641c76a30397",
      "type": "library",
      "name": "github.com/cyphar/filepath-securejoin",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BtGB77njd6SVO6VztOHfPxKitJvd/VPT+OFBFMOi1Is="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e9f2523631a5d82c",
      "type": "library",
      "name": "github.com/davecgh/go-spew",
      "version": "v1.1.2-0.20180830191138-d8f796af33cc",
      "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=ee8299b7af36c0e0",
      "type": "library",
      "name": "github.com/davecgh/go-spew",
      "version": "v1.1.2-0.20180830191138-d8f796af33cc",
      "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f?package-id=33f921ae10c2af17",
      "type": "library",
      "name": "github.com/dgryski/go-rendezvous",
      "version": "v0.0.0-20200823014737-9f7001d12a5f",
      "cpe": "cpe:2.3:a:dgryski:go-rendezvous:v0.0.0-20200823014737-9f7001d12a5f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dgryski:go_rendezvous:v0.0.0-20200823014737-9f7001d12a5f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f?package-id=b985f6135e35abe0",
      "type": "library",
      "name": "github.com/dgryski/go-rendezvous",
      "version": "v0.0.0-20200823014737-9f7001d12a5f",
      "cpe": "cpe:2.3:a:dgryski:go-rendezvous:v0.0.0-20200823014737-9f7001d12a5f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dgryski:go_rendezvous:v0.0.0-20200823014737-9f7001d12a5f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=33b3e556f2babaec",
      "type": "library",
      "name": "github.com/digitorus/pkcs7",
      "version": "v0.0.0-20230818184609-3a137a874352",
      "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=fc1a73b966b46910",
      "type": "library",
      "name": "github.com/digitorus/pkcs7",
      "version": "v0.0.0-20230818184609-3a137a874352",
      "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=c9c18741265892a9",
      "type": "library",
      "name": "github.com/digitorus/timestamp",
      "version": "v0.0.0-20231217203849-220c5c2851b7",
      "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=1f9d466756f46f5f",
      "type": "library",
      "name": "github.com/digitorus/timestamp",
      "version": "v0.0.0-20231217203849-220c5c2851b7",
      "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/distribution/reference@v0.6.0?package-id=3f1a44ba649755ad",
      "type": "library",
      "name": "github.com/distribution/reference",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/distribution/reference@v0.6.0?package-id=18206a13071537e1",
      "type": "library",
      "name": "github.com/distribution/reference",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dlclark/regexp2@v1.11.0?package-id=3440fd25722cc4e5",
      "type": "library",
      "name": "github.com/dlclark/regexp2",
      "version": "v1.11.0",
      "cpe": "cpe:2.3:a:dlclark:regexp2:v1.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dlclark/regexp2@v1.11.0?package-id=e4353587279ee396",
      "type": "library",
      "name": "github.com/dlclark/regexp2",
      "version": "v1.11.0",
      "cpe": "cpe:2.3:a:dlclark:regexp2:v1.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible?package-id=62cadfa850a2c5ac",
      "type": "library",
      "name": "github.com/docker/cli",
      "version": "v29.0.3+incompatible",
      "cpe": "cpe:2.3:a:docker:cli:v29.0.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8J+PZIcF2xLd6h5sHPsp5pvvJA+Sr2wGQxHkRl53a1E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible?package-id=67fba7e7b4ed6b46",
      "type": "library",
      "name": "github.com/docker/cli",
      "version": "v29.0.3+incompatible",
      "cpe": "cpe:2.3:a:docker:cli:v29.0.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8J+PZIcF2xLd6h5sHPsp5pvvJA+Sr2wGQxHkRl53a1E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible?package-id=0ed035fc4af3b682",
      "type": "library",
      "name": "github.com/docker/distribution",
      "version": "v2.8.3+incompatible",
      "cpe": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible?package-id=658a1c525a9eaf60",
      "type": "library",
      "name": "github.com/docker/distribution",
      "version": "v2.8.3+incompatible",
      "cpe": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible?package-id=2ab90883ad7bd26a",
      "type": "library",
      "name": "github.com/docker/docker",
      "version": "v28.5.2+incompatible",
      "cpe": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible?package-id=0772978927b4d0fe",
      "type": "library",
      "name": "github.com/docker/docker",
      "version": "v28.5.2+incompatible",
      "cpe": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3?package-id=8270040cd9ea682f",
      "type": "library",
      "name": "github.com/docker/docker-credential-helpers",
      "version": "v0.9.3",
      "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gAm/VtF9wgqJMoxzT3Gj5p4AqIjCBS4wrsOh9yRqcz8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3?package-id=f80465e061325d3f",
      "type": "library",
      "name": "github.com/docker/docker-credential-helpers",
      "version": "v0.9.3",
      "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gAm/VtF9wgqJMoxzT3Gj5p4AqIjCBS4wrsOh9yRqcz8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-connections@v0.6.0?package-id=3d09446bb503b3dc",
      "type": "library",
      "name": "github.com/docker/go-connections",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:docker:go-connections:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/go-connections@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:go_connections:v0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-connections@v0.6.0?package-id=d70695abd4714be1",
      "type": "library",
      "name": "github.com/docker/go-connections",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:docker:go-connections:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/go-connections@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:go_connections:v0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=2375b09c146b6bff",
      "type": "library",
      "name": "github.com/docker/go-units",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=079858e3061089bb",
      "type": "library",
      "name": "github.com/docker/go-units",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707?package-id=a530ef68c89a1bd2",
      "type": "library",
      "name": "github.com/dsnet/compress",
      "version": "v0.0.2-0.20230904184137-39efe44ab707",
      "cpe": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2tV76y6Q9BB+NEBasnqvs7e49aEBFI8ejC89PSnWH+4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707?package-id=d8b1a8e54b732c66",
      "type": "library",
      "name": "github.com/dsnet/compress",
      "version": "v0.0.2-0.20230904184137-39efe44ab707",
      "cpe": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2tV76y6Q9BB+NEBasnqvs7e49aEBFI8ejC89PSnWH+4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=d4350eca2bae2d97",
      "type": "library",
      "name": "github.com/dustin/go-humanize",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=80104dbef1d51558",
      "type": "library",
      "name": "github.com/dustin/go-humanize",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=594c98fac62bb296",
      "type": "library",
      "name": "github.com/emicklei/go-restful/v3",
      "version": "v3.13.0",
      "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=64e95d6ebee447cd",
      "type": "library",
      "name": "github.com/emicklei/go-restful/v3",
      "version": "v3.13.0",
      "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=11231529369f4c0d",
      "type": "library",
      "name": "github.com/emirpasic/gods",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=628a68cb0c2bffec",
      "type": "library",
      "name": "github.com/emirpasic/gods",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4?package-id=703032f55804cc56",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.32.4",
      "cpe": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.32.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.32.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jb83lalDRZSpPWW2Z7Mck/8kXZ5CQAFYVjQcdVIr83A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4?package-id=0a8e832994ae9d94",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.32.4",
      "cpe": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.32.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.32.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jb83lalDRZSpPWW2Z7Mck/8kXZ5CQAFYVjQcdVIr83A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1?package-id=67da4c24ba72655a",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DEo3O99U8j4hBFwbJfrz9VtgcDfUKS7KJ7spH3d86P8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1?package-id=6638c56415e94a40",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DEo3O99U8j4hBFwbJfrz9VtgcDfUKS7KJ7spH3d86P8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible?package-id=447ffa7f90c6b22d",
      "type": "library",
      "name": "github.com/evanphx/json-patch",
      "version": "v5.9.11+incompatible",
      "cpe": "cpe:2.3:a:evanphx:json-patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:evanphx:json_patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible?package-id=0f9b8ec1e6958a6f",
      "type": "library",
      "name": "github.com/evanphx/json-patch",
      "version": "v5.9.11+incompatible",
      "cpe": "cpe:2.3:a:evanphx:json-patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:evanphx:json_patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20240609211631-fc37c2fa9de2?package-id=647d908ef9b99d4f",
      "type": "library",
      "name": "github.com/evanw/esbuild",
      "version": "v0.0.0-20240609211631-fc37c2fa9de2",
      "cpe": "cpe:2.3:a:evanw:esbuild:v0.0.0-20240609211631-fc37c2fa9de2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20240609211631-fc37c2fa9de2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.21.5/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.20.12"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/evanw/esbuild"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20250917161616-d6b668f96fb0?package-id=559e63d2047d087f",
      "type": "library",
      "name": "github.com/evanw/esbuild",
      "version": "v0.0.0-20250917161616-d6b668f96fb0",
      "cpe": "cpe:2.3:a:evanw:esbuild:v0.0.0-20250917161616-d6b668f96fb0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20250917161616-d6b668f96fb0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.25.10/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.23.12"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/evanw/esbuild"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f?package-id=27040cb1187546db",
      "type": "library",
      "name": "github.com/exponent-io/jsonpath",
      "version": "v0.0.0-20210407135951-1de76d718b3f",
      "cpe": "cpe:2.3:a:exponent-io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponent_io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponent:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wl78ApPPB2Wvf/TIe2xdyJxTlb6obmF18d8QdkxNDu4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f?package-id=5d224783b6bfb368",
      "type": "library",
      "name": "github.com/exponent-io/jsonpath",
      "version": "v0.0.0-20210407135951-1de76d718b3f",
      "cpe": "cpe:2.3:a:exponent-io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponent_io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponent:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wl78ApPPB2Wvf/TIe2xdyJxTlb6obmF18d8QdkxNDu4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fatih/color@v1.18.0?package-id=1b698410afe10990",
      "type": "library",
      "name": "github.com/fatih/color",
      "version": "v1.18.0",
      "cpe": "cpe:2.3:a:fatih:color:v1.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fatih/color@v1.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fatih/color@v1.18.0?package-id=b472477c0c89157c",
      "type": "library",
      "name": "github.com/fatih/color",
      "version": "v1.18.0",
      "cpe": "cpe:2.3:a:fatih:color:v1.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fatih/color@v1.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=76675e81aaee4979",
      "type": "library",
      "name": "github.com/felixge/httpsnoop",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=5f4c504edb794f96",
      "type": "library",
      "name": "github.com/felixge/httpsnoop",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=c53a140cf01d4ecf",
      "type": "library",
      "name": "github.com/fsnotify/fsnotify",
      "version": "v1.9.0",
      "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=92ed03d9c2050f9f",
      "type": "library",
      "name": "github.com/fsnotify/fsnotify",
      "version": "v1.9.0",
      "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0?package-id=32089497b3fbee91",
      "type": "library",
      "name": "github.com/fvbommel/sortorder",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fUmoe+HLsBTctBDoaBwpQo5N+nrCp8g/BjKb/6ZQmYw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0?package-id=008228121b8968bf",
      "type": "library",
      "name": "github.com/fvbommel/sortorder",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fUmoe+HLsBTctBDoaBwpQo5N+nrCp8g/BjKb/6ZQmYw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=8654d54efdfd4764",
      "type": "library",
      "name": "github.com/fxamacker/cbor/v2",
      "version": "v2.9.0",
      "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=f8e21fd26bbf9f64",
      "type": "library",
      "name": "github.com/fxamacker/cbor/v2",
      "version": "v2.9.0",
      "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.2.3?package-id=1e4575b8a2941019",
      "type": "library",
      "name": "github.com/go-chi/chi/v5",
      "version": "v5.2.3",
      "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:chi\\/v5:v5.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WQIt9uxdsAbgIYgid+BpYc+liqQZGMHRaUwp0JUcvdE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.2.3?package-id=0cbe9775bb899422",
      "type": "library",
      "name": "github.com/go-chi/chi/v5",
      "version": "v5.2.3",
      "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:chi\\/v5:v5.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WQIt9uxdsAbgIYgid+BpYc+liqQZGMHRaUwp0JUcvdE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-errors/errors@v1.4.2?package-id=82409e68dd182b44",
      "type": "library",
      "name": "github.com/go-errors/errors",
      "version": "v1.4.2",
      "cpe": "cpe:2.3:a:go-errors:errors:v1.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-errors/errors@v1.4.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_errors:errors:v1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:errors:v1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-errors/errors@v1.4.2?package-id=3da5deebf43f8346",
      "type": "library",
      "name": "github.com/go-errors/errors",
      "version": "v1.4.2",
      "cpe": "cpe:2.3:a:go-errors:errors:v1.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-errors/errors@v1.4.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_errors:errors:v1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:errors:v1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=b4eb05c32933771b",
      "type": "library",
      "name": "github.com/go-git/gcfg",
      "version": "v1.5.1-0.20230307220236-3a3c6141e376",
      "cpe": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=a3e33c0873fe296f",
      "type": "library",
      "name": "github.com/go-git/gcfg",
      "version": "v1.5.1-0.20230307220236-3a3c6141e376",
      "cpe": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2?package-id=dc9f37f97c83f0cb",
      "type": "library",
      "name": "github.com/go-git/go-billy/v5",
      "version": "v5.6.2",
      "cpe": "cpe:2.3:a:go-git:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-git:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6Q86EsPXMa7c3YZ3aLAQsMA0VlWmy43r6FHqa/UNbRM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2?package-id=de79db3bb1f2e29e",
      "type": "library",
      "name": "github.com/go-git/go-billy/v5",
      "version": "v5.6.2",
      "cpe": "cpe:2.3:a:go-git:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-git:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_billy\\/v5:v5.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6Q86EsPXMa7c3YZ3aLAQsMA0VlWmy43r6FHqa/UNbRM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-git/v5@v5.16.3?package-id=ee560cf1889068ba",
      "type": "library",
      "name": "github.com/go-git/go-git/v5",
      "version": "v5.16.3",
      "cpe": "cpe:2.3:a:go-git:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.16.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-git:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Z8BtvxZ09bYm/yYNgPKCzgWtaRqDTgIKRgIRHBfU6Z8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-git/v5@v5.16.3?package-id=730c0d6a1619b6e3",
      "type": "library",
      "name": "github.com/go-git/go-git/v5",
      "version": "v5.16.3",
      "cpe": "cpe:2.3:a:go-git:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.16.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-git:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_git:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_git\\/v5:v5.16.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Z8BtvxZ09bYm/yYNgPKCzgWtaRqDTgIKRgIRHBfU6Z8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0?package-id=3f2e0ff3a1448013",
      "type": "library",
      "name": "github.com/go-gorp/gorp/v3",
      "version": "v3.1.0",
      "cpe": "cpe:2.3:a:go-gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0?package-id=89493d9de2bab3ce",
      "type": "library",
      "name": "github.com/go-gorp/gorp/v3",
      "version": "v3.1.0",
      "cpe": "cpe:2.3:a:go-gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-ini/ini@v1.67.0?package-id=2fdab9fd1d1be625",
      "type": "library",
      "name": "github.com/go-ini/ini",
      "version": "v1.67.0",
      "cpe": "cpe:2.3:a:go-ini:ini:v1.67.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-ini/ini@v1.67.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_ini:ini:v1.67.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ini:v1.67.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:z6ZrTEZqSWOTyH2FlglNbNgARyHG8oLW9gMELqKr06A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-ini/ini@v1.67.0?package-id=6d4610ca451f8387",
      "type": "library",
      "name": "github.com/go-ini/ini",
      "version": "v1.67.0",
      "cpe": "cpe:2.3:a:go-ini:ini:v1.67.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-ini/ini@v1.67.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_ini:ini:v1.67.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ini:v1.67.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:z6ZrTEZqSWOTyH2FlglNbNgARyHG8oLW9gMELqKr06A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2?package-id=d4a05bd8680e8975",
      "type": "library",
      "name": "github.com/go-jose/go-jose/v4",
      "version": "v4.1.2",
      "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TK/7NqRQZfgAh+Td8AlsrvtPoUyiHh0LqVvokh+1vHI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2?package-id=b232a2120949ffa1",
      "type": "library",
      "name": "github.com/go-jose/go-jose/v4",
      "version": "v4.1.2",
      "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TK/7NqRQZfgAh+Td8AlsrvtPoUyiHh0LqVvokh+1vHI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=a9013ea499641d37",
      "type": "library",
      "name": "github.com/go-logr/logr",
      "version": "v1.4.3",
      "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=429800fa1f99f53b",
      "type": "library",
      "name": "github.com/go-logr/logr",
      "version": "v1.4.3",
      "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=9d40fad1cb7786b2",
      "type": "library",
      "name": "github.com/go-logr/stdr",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=6183b42176db0505",
      "type": "library",
      "name": "github.com/go-logr/stdr",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.24.1?package-id=24a68c7227161fb0",
      "type": "library",
      "name": "github.com/go-openapi/analysis",
      "version": "v0.24.1",
      "cpe": "cpe:2.3:a:go-openapi:analysis:v0.24.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/analysis@v0.24.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:analysis:v0.24.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:analysis:v0.24.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Xp+7Yn/KOnVWYG8d+hPksOYnCYImE3TieBa7rBOesYM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.24.1?package-id=03e03bb204607ed5",
      "type": "library",
      "name": "github.com/go-openapi/analysis",
      "version": "v0.24.1",
      "cpe": "cpe:2.3:a:go-openapi:analysis:v0.24.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/analysis@v0.24.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:analysis:v0.24.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:analysis:v0.24.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Xp+7Yn/KOnVWYG8d+hPksOYnCYImE3TieBa7rBOesYM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.4?package-id=bc7f7a4262e29bc4",
      "type": "library",
      "name": "github.com/go-openapi/errors",
      "version": "v0.22.4",
      "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:errors:v0.22.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:errors:v0.22.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oi2K9mHTOb5DPW2Zjdzs/NIvwi2N3fARKaTJLdNabaM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.4?package-id=f7baaa4dcb7b1fe1",
      "type": "library",
      "name": "github.com/go-openapi/errors",
      "version": "v0.22.4",
      "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:errors:v0.22.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:errors:v0.22.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oi2K9mHTOb5DPW2Zjdzs/NIvwi2N3fARKaTJLdNabaM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1?package-id=7799d37c63e7bdd0",
      "type": "library",
      "name": "github.com/go-openapi/jsonpointer",
      "version": "v0.22.1",
      "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonpointer:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1?package-id=b393038dd0da70e2",
      "type": "library",
      "name": "github.com/go-openapi/jsonpointer",
      "version": "v0.22.1",
      "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonpointer:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3?package-id=9a688720baf5269a",
      "type": "library",
      "name": "github.com/go-openapi/jsonreference",
      "version": "v0.21.3",
      "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonreference:v0.21.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3?package-id=eea257b8f11fabfc",
      "type": "library",
      "name": "github.com/go-openapi/jsonreference",
      "version": "v0.21.3",
      "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonreference:v0.21.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.23.2?package-id=43bec9f0acda6c25",
      "type": "library",
      "name": "github.com/go-openapi/loads",
      "version": "v0.23.2",
      "cpe": "cpe:2.3:a:go-openapi:loads:v0.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/loads@v0.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:loads:v0.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:loads:v0.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rJXAcP7g1+lWyBHC7iTY+WAF0rprtM+pm8Jxv1uQJp4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.23.2?package-id=6303e6e1a54cb842",
      "type": "library",
      "name": "github.com/go-openapi/loads",
      "version": "v0.23.2",
      "cpe": "cpe:2.3:a:go-openapi:loads:v0.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/loads@v0.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:loads:v0.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:loads:v0.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rJXAcP7g1+lWyBHC7iTY+WAF0rprtM+pm8Jxv1uQJp4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.29.2?package-id=4df59e63809b7afd",
      "type": "library",
      "name": "github.com/go-openapi/runtime",
      "version": "v0.29.2",
      "cpe": "cpe:2.3:a:go-openapi:runtime:v0.29.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/runtime@v0.29.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:runtime:v0.29.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:runtime:v0.29.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UmwSGWNmWQqKm1c2MGgXVpC2FTGwPDQeUsBMufc5Yj0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.29.2?package-id=9f0dcad9e53f7e96",
      "type": "library",
      "name": "github.com/go-openapi/runtime",
      "version": "v0.29.2",
      "cpe": "cpe:2.3:a:go-openapi:runtime:v0.29.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/runtime@v0.29.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:runtime:v0.29.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:runtime:v0.29.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UmwSGWNmWQqKm1c2MGgXVpC2FTGwPDQeUsBMufc5Yj0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.1?package-id=29266b252d998b54",
      "type": "library",
      "name": "github.com/go-openapi/spec",
      "version": "v0.22.1",
      "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:spec:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:spec:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:beZMa5AVQzRspNjvhe5aG1/XyBSMeX1eEOs7dMoXh/k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.1?package-id=789f0275c51e90b0",
      "type": "library",
      "name": "github.com/go-openapi/spec",
      "version": "v0.22.1",
      "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:spec:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:spec:v0.22.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:beZMa5AVQzRspNjvhe5aG1/XyBSMeX1eEOs7dMoXh/k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.25.0?package-id=c382f563e0139162",
      "type": "library",
      "name": "github.com/go-openapi/strfmt",
      "version": "v0.25.0",
      "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.25.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.25.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:strfmt:v0.25.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:strfmt:v0.25.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7R0RX7mbKLa9EYCTHRcCuIPcaqlyQiWNPTXwClK0saQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.25.0?package-id=c0a338d40a415173",
      "type": "library",
      "name": "github.com/go-openapi/strfmt",
      "version": "v0.25.0",
      "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.25.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.25.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:strfmt:v0.25.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:strfmt:v0.25.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7R0RX7mbKLa9EYCTHRcCuIPcaqlyQiWNPTXwClK0saQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.25.1?package-id=5a006099fb5014e8",
      "type": "library",
      "name": "github.com/go-openapi/swag",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6uwVsx+/OuvFVPqfQmOOPsqTcm5/GkBhNwLqIR916n8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.25.1?package-id=ea13ff73d1182a96",
      "type": "library",
      "name": "github.com/go-openapi/swag",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6uwVsx+/OuvFVPqfQmOOPsqTcm5/GkBhNwLqIR916n8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1?package-id=61bc8fb7f2ca8146",
      "type": "library",
      "name": "github.com/go-openapi/swag/cmdutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nDke3nAFDArAa631aitksFGj2omusks88GF1VwdYqPY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1?package-id=3292997d52370ee6",
      "type": "library",
      "name": "github.com/go-openapi/swag/cmdutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nDke3nAFDArAa631aitksFGj2omusks88GF1VwdYqPY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1?package-id=ced5e4ff1536795a",
      "type": "library",
      "name": "github.com/go-openapi/swag/conv",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/conv:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1?package-id=457ea72c8e6eb1b4",
      "type": "library",
      "name": "github.com/go-openapi/swag/conv",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/conv:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1?package-id=fe43412b59e75b4b",
      "type": "library",
      "name": "github.com/go-openapi/swag/fileutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rSRXapjQequt7kqalKXdcpIegIShhTPXx7yw0kek2uU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1?package-id=b7d9b0d6314e3392",
      "type": "library",
      "name": "github.com/go-openapi/swag/fileutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/fileutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rSRXapjQequt7kqalKXdcpIegIShhTPXx7yw0kek2uU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1?package-id=c169d1f80c67374d",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonname",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1?package-id=fad076c0382f6f23",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonname",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonname:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1?package-id=0d9fef3badac278b",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AihLHaD0brrkJoMqEZOBNzTLnk81Kg9cWr+SPtxtgl8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1?package-id=89a8892214ffaa24",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AihLHaD0brrkJoMqEZOBNzTLnk81Kg9cWr+SPtxtgl8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1?package-id=daab274cfa4ec779",
      "type": "library",
      "name": "github.com/go-openapi/swag/loading",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/loading:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6OruqzjWoJyanZOim58iG2vj934TysYVptyaoXS24kw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1?package-id=e1a00a9af5d4a529",
      "type": "library",
      "name": "github.com/go-openapi/swag/loading",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/loading:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6OruqzjWoJyanZOim58iG2vj934TysYVptyaoXS24kw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1?package-id=be3abe9303489c3d",
      "type": "library",
      "name": "github.com/go-openapi/swag/mangling",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XzILnLzhZPZNtmxKaz/2xIGPQsBsvmCjrJOWGNz/ync="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1?package-id=0db60677ab62dc7d",
      "type": "library",
      "name": "github.com/go-openapi/swag/mangling",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/mangling:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XzILnLzhZPZNtmxKaz/2xIGPQsBsvmCjrJOWGNz/ync="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1?package-id=3eb59eb19ada5f3c",
      "type": "library",
      "name": "github.com/go-openapi/swag/netutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2wFLYahe40tDUHfKT1GRC4rfa5T1B4GWZ+msEFA4Fl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1?package-id=1bda512ce1e5eaca",
      "type": "library",
      "name": "github.com/go-openapi/swag/netutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/netutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2wFLYahe40tDUHfKT1GRC4rfa5T1B4GWZ+msEFA4Fl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1?package-id=c61dee1b91236b7c",
      "type": "library",
      "name": "github.com/go-openapi/swag/stringutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Xasqgjvk30eUe8VKdmyzKtjkVjeiXx1Iz0zDfMNpPbw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1?package-id=7ff16c602b731393",
      "type": "library",
      "name": "github.com/go-openapi/swag/stringutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/stringutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Xasqgjvk30eUe8VKdmyzKtjkVjeiXx1Iz0zDfMNpPbw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1?package-id=eac690378d6dd2ed",
      "type": "library",
      "name": "github.com/go-openapi/swag/typeutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3I3ysiFZqukA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1?package-id=ac8d1141df09be69",
      "type": "library",
      "name": "github.com/go-openapi/swag/typeutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/typeutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3I3ysiFZqukA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1?package-id=7477815fc6572712",
      "type": "library",
      "name": "github.com/go-openapi/swag/yamlutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1?package-id=b5c33c8e71105d4c",
      "type": "library",
      "name": "github.com/go-openapi/swag/yamlutils",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.25.1?package-id=a337266fb2a94821",
      "type": "library",
      "name": "github.com/go-openapi/validate",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:validate:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/validate@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:validate:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:validate:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:sSACUI6Jcnbo5IWqbYHgjibrhhmt3vR6lCzKZnmAgBw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.25.1?package-id=504c04e8f3e89731",
      "type": "library",
      "name": "github.com/go-openapi/validate",
      "version": "v0.25.1",
      "cpe": "cpe:2.3:a:go-openapi:validate:v0.25.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/validate@v0.25.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:validate:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:validate:v0.25.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:sSACUI6Jcnbo5IWqbYHgjibrhhmt3vR6lCzKZnmAgBw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-redis/redis/v8@v8.11.5?package-id=ca30f8110c77b5ef",
      "type": "library",
      "name": "github.com/go-redis/redis/v8",
      "version": "v8.11.5",
      "cpe": "cpe:2.3:a:go-redis:redis\\/v8:v8.11.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-redis/redis/v8@v8.11.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_redis:redis\\/v8:v8.11.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:redis\\/v8:v8.11.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-redis/redis/v8@v8.11.5?package-id=62cd189b22a2d6fe",
      "type": "library",
      "name": "github.com/go-redis/redis/v8",
      "version": "v8.11.5",
      "cpe": "cpe:2.3:a:go-redis:redis\\/v8:v8.11.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-redis/redis/v8@v8.11.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_redis:redis\\/v8:v8.11.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:redis\\/v8:v8.11.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0?package-id=4e91b9825d5cf7bb",
      "type": "library",
      "name": "github.com/go-viper/mapstructure/v2",
      "version": "v2.4.0",
      "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0?package-id=39f79696e02dace5",
      "type": "library",
      "name": "github.com/go-viper/mapstructure/v2",
      "version": "v2.4.0",
      "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=27e346616a7c0f7c",
      "type": "library",
      "name": "github.com/gobwas/glob",
      "version": "v0.2.3",
      "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=379f53862e7d7a07",
      "type": "library",
      "name": "github.com/gobwas/glob",
      "version": "v0.2.3",
      "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0?package-id=561e96dbed8737ef",
      "type": "library",
      "name": "github.com/gocsaf/csaf/v3",
      "version": "v3.4.0",
      "cpe": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rzVTiA5WmzTHumgGfK/823h0zQ0y4WAS+Rorhcm2LDE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0?package-id=ce148b512e677282",
      "type": "library",
      "name": "github.com/gocsaf/csaf/v3",
      "version": "v3.4.0",
      "cpe": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rzVTiA5WmzTHumgGfK/823h0zQ0y4WAS+Rorhcm2LDE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=0a2153d89d7730ae",
      "type": "library",
      "name": "github.com/gogo/protobuf",
      "version": "v1.3.2",
      "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=881f7dda5580e227",
      "type": "library",
      "name": "github.com/gogo/protobuf",
      "version": "v1.3.2",
      "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0?package-id=6de8e56a79a774a6",
      "type": "library",
      "name": "github.com/golang-jwt/jwt/v5",
      "version": "v5.3.0",
      "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0?package-id=74f382773c9c68c4",
      "type": "library",
      "name": "github.com/golang-jwt/jwt/v5",
      "version": "v5.3.0",
      "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=101e82cb5cc6e3e6",
      "type": "library",
      "name": "github.com/golang/groupcache",
      "version": "v0.0.0-20241129210726-2c02b8208cf8",
      "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=8e57ac098b057afc",
      "type": "library",
      "name": "github.com/golang/groupcache",
      "version": "v0.0.0-20241129210726-2c02b8208cf8",
      "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=4b26a0180d2618bf",
      "type": "library",
      "name": "github.com/golang/snappy",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang/snappy@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=3b2b90510a4de616",
      "type": "library",
      "name": "github.com/golang/snappy",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang/snappy@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/btree@v1.1.3?package-id=d61299d6e8b5f608",
      "type": "library",
      "name": "github.com/google/btree",
      "version": "v1.1.3",
      "cpe": "cpe:2.3:a:google:btree:v1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/btree@v1.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/btree@v1.1.3?package-id=8f4d0057f2b7c367",
      "type": "library",
      "name": "github.com/google/btree",
      "version": "v1.1.3",
      "cpe": "cpe:2.3:a:google:btree:v1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/btree@v1.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8?package-id=614845318937c868",
      "type": "library",
      "name": "github.com/google/certificate-transparency-go",
      "version": "v1.1.8",
      "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.1.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:certificate_transparency_go:v1.1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LGYKkgZF7satzgTak9R4yzfJXEeYVAjV6/EAEJOf1to="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8?package-id=0b62600d9e27ba64",
      "type": "library",
      "name": "github.com/google/certificate-transparency-go",
      "version": "v1.1.8",
      "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.1.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:certificate_transparency_go:v1.1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LGYKkgZF7satzgTak9R4yzfJXEeYVAjV6/EAEJOf1to="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=92cf9d19a228b8ef",
      "type": "library",
      "name": "github.com/google/gnostic-models",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=836a1806d4514ff2",
      "type": "library",
      "name": "github.com/google/gnostic-models",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=1e23702824c7053b",
      "type": "library",
      "name": "github.com/google/go-cmp",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=3c0d7b2b6d8860e8",
      "type": "library",
      "name": "github.com/google/go-cmp",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.20.6?package-id=9a84d3dea8adb6f2",
      "type": "library",
      "name": "github.com/google/go-containerregistry",
      "version": "v0.20.6",
      "cpe": "cpe:2.3:a:google:go-containerregistry:v0.20.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-containerregistry@v0.20.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_containerregistry:v0.20.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cvWX87UxxLgaH76b4hIvya6Dzz9qHB31qAwjAohdSTU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.20.6?package-id=4ad87019a580ad8c",
      "type": "library",
      "name": "github.com/google/go-containerregistry",
      "version": "v0.20.6",
      "cpe": "cpe:2.3:a:google:go-containerregistry:v0.20.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-containerregistry@v0.20.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_containerregistry:v0.20.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cvWX87UxxLgaH76b4hIvya6Dzz9qHB31qAwjAohdSTU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v62@v62.0.0?package-id=a042dbfd0b3df3a1",
      "type": "library",
      "name": "github.com/google/go-github/v62",
      "version": "v62.0.0",
      "cpe": "cpe:2.3:a:google:go-github\\/v62:v62.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_github\\/v62:v62.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/6mGCaRywZz9MuHyw9gD1CwsbmBX8GWsbFkwMmHdhl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v62@v62.0.0?package-id=f15cb51f53ec5786",
      "type": "library",
      "name": "github.com/google/go-github/v62",
      "version": "v62.0.0",
      "cpe": "cpe:2.3:a:google:go-github\\/v62:v62.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_github\\/v62:v62.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/6mGCaRywZz9MuHyw9gD1CwsbmBX8GWsbFkwMmHdhl4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=60ddfb0f462de68d",
      "type": "library",
      "name": "github.com/google/go-querystring",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:google:go-querystring:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_querystring:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=dbd27a6e04688084",
      "type": "library",
      "name": "github.com/google/go-querystring",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:google:go-querystring:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_querystring:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0?package-id=8edc1a8eab682653",
      "type": "library",
      "name": "github.com/google/licenseclassifier/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:google:licenseclassifier\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1Y57HHILNf4m0ABuMVb6xk4vAJYEUO0gDxNpog0pyeA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0?package-id=21ae1889034a5cd2",
      "type": "library",
      "name": "github.com/google/licenseclassifier/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:google:licenseclassifier\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1Y57HHILNf4m0ABuMVb6xk4vAJYEUO0gDxNpog0pyeA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=f6594add8d655662",
      "type": "library",
      "name": "github.com/google/s2a-go",
      "version": "v0.1.9",
      "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=8fb2ac26ac0933f2",
      "type": "library",
      "name": "github.com/google/s2a-go",
      "version": "v0.1.9",
      "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=d76a7e2479f2bfa5",
      "type": "library",
      "name": "github.com/google/uuid",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=9d707a7cc2d6491b",
      "type": "library",
      "name": "github.com/google/uuid",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6?package-id=98c075dcf022d80e",
      "type": "library",
      "name": "github.com/googleapis/enterprise-certificate-proxy",
      "version": "v0.3.6",
      "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GW/XbdyBFQ8Qe+YAmFU9uHLo7OnF5tL52HFAgMmyrf4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6?package-id=25f194f555fb1f66",
      "type": "library",
      "name": "github.com/googleapis/enterprise-certificate-proxy",
      "version": "v0.3.6",
      "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GW/XbdyBFQ8Qe+YAmFU9uHLo7OnF5tL52HFAgMmyrf4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0?package-id=cedf7e0e63c2c21d",
      "type": "library",
      "name": "github.com/googleapis/gax-go/v2",
      "version": "v2.15.0",
      "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SyjDc1mGgZU5LncH8gimWo9lW1DtIfPibOG81vgd/bo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0?package-id=f21a74d4bd193355",
      "type": "library",
      "name": "github.com/googleapis/gax-go/v2",
      "version": "v2.15.0",
      "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.15.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SyjDc1mGgZU5LncH8gimWo9lW1DtIfPibOG81vgd/bo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674?package-id=59105213c17e7b83",
      "type": "library",
      "name": "github.com/gorilla/websocket",
      "version": "v1.5.4-0.20250319132907-e064f32e3674",
      "cpe": "cpe:2.3:a:gorilla:websocket:v1.5.4-0.20250319132907-e064f32e3674:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JeSE6pjso5THxAzdVpqr6/geYxZytqFMBCOtn/ujyeo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674?package-id=eecd4315e5e4485e",
      "type": "library",
      "name": "github.com/gorilla/websocket",
      "version": "v1.5.4-0.20250319132907-e064f32e3674",
      "cpe": "cpe:2.3:a:gorilla:websocket:v1.5.4-0.20250319132907-e064f32e3674:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JeSE6pjso5THxAzdVpqr6/geYxZytqFMBCOtn/ujyeo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=e7debf9b006a5d61",
      "type": "library",
      "name": "github.com/gosuri/uitable",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:gosuri:uitable:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gosuri/uitable@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=92dcc33a075a30cc",
      "type": "library",
      "name": "github.com/gosuri/uitable",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:gosuri:uitable:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gosuri/uitable@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79?package-id=3ecc04f4bdf08b03",
      "type": "library",
      "name": "github.com/gregjones/httpcache",
      "version": "v0.0.0-20190611155906-901d90724c79",
      "cpe": "cpe:2.3:a:gregjones:httpcache:v0.0.0-20190611155906-901d90724c79:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79?package-id=6d14cf2a75f9eddc",
      "type": "library",
      "name": "github.com/gregjones/httpcache",
      "version": "v0.0.0-20190611155906-901d90724c79",
      "cpe": "cpe:2.3:a:gregjones:httpcache:v0.0.0-20190611155906-901d90724c79:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2?package-id=0b0f787517b47b9f",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.27.2",
      "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8Tjv8EJ+pM1xP8mK6egEbD1OgnVTyacbefKhmbLhIhU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2?package-id=7f0f95a6f3f49b1f",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.27.2",
      "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8Tjv8EJ+pM1xP8mK6egEbD1OgnVTyacbefKhmbLhIhU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65?package-id=157d8bbcd179f996",
      "type": "library",
      "name": "github.com/hashicorp/aws-sdk-go-base/v2",
      "version": "v2.0.0-beta.65",
      "cpe": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.65:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.65:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:81+kWbE1yErFBMjME0I5k3x3kojjKsWtPYHEAutoPow="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65?package-id=9aa325ed17c2343f",
      "type": "library",
      "name": "github.com/hashicorp/aws-sdk-go-base/v2",
      "version": "v2.0.0-beta.65",
      "cpe": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.65:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.65:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:81+kWbE1yErFBMjME0I5k3x3kojjKsWtPYHEAutoPow="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=66c019ff6c1edb70",
      "type": "library",
      "name": "github.com/hashicorp/errwrap",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=068457ac51524d4a",
      "type": "library",
      "name": "github.com/hashicorp/errwrap",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=d6b3f79fc44573dc",
      "type": "library",
      "name": "github.com/hashicorp/go-cleanhttp",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=00f46993ff558d66",
      "type": "library",
      "name": "github.com/hashicorp/go-cleanhttp",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-getter@v1.8.3?package-id=61d17750627cfe6f",
      "type": "library",
      "name": "github.com/hashicorp/go-getter",
      "version": "v1.8.3",
      "cpe": "cpe:2.3:a:hashicorp:go-getter:v1.8.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-getter@v1.8.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_getter:v1.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gIS+oTNv3kyYAvlUVgMR46MiG0bM0KuSON/KZEvRoRg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-getter@v1.8.3?package-id=12437f65c5fffa23",
      "type": "library",
      "name": "github.com/hashicorp/go-getter",
      "version": "v1.8.3",
      "cpe": "cpe:2.3:a:hashicorp:go-getter:v1.8.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-getter@v1.8.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_getter:v1.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gIS+oTNv3kyYAvlUVgMR46MiG0bM0KuSON/KZEvRoRg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=f2fb4cf37a01b598",
      "type": "library",
      "name": "github.com/hashicorp/go-multierror",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=bc51fe5aa47e1320",
      "type": "library",
      "name": "github.com/hashicorp/go-multierror",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=950e451bd0259de0",
      "type": "library",
      "name": "github.com/hashicorp/go-retryablehttp",
      "version": "v0.7.8",
      "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=c2d5898c96f85b46",
      "type": "library",
      "name": "github.com/hashicorp/go-retryablehttp",
      "version": "v0.7.8",
      "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3?package-id=f15754939c1cd609",
      "type": "library",
      "name": "github.com/hashicorp/go-uuid",
      "version": "v1.0.3",
      "cpe": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3?package-id=385500d714e92ec8",
      "type": "library",
      "name": "github.com/hashicorp/go-uuid",
      "version": "v1.0.3",
      "cpe": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-version@v1.7.0?package-id=98c29e2f9dc0071e",
      "type": "library",
      "name": "github.com/hashicorp/go-version",
      "version": "v1.7.0",
      "cpe": "cpe:2.3:a:hashicorp:go-version:v1.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-version@v1.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_version:v1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-version@v1.7.0?package-id=f14006afdee30652",
      "type": "library",
      "name": "github.com/hashicorp/go-version",
      "version": "v1.7.0",
      "cpe": "cpe:2.3:a:hashicorp:go-version:v1.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-version@v1.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_version:v1.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=f746c62ee2554b96",
      "type": "library",
      "name": "github.com/hashicorp/golang-lru/v2",
      "version": "v2.0.7",
      "cpe": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=4e81bc4749728eff",
      "type": "library",
      "name": "github.com/hashicorp/golang-lru/v2",
      "version": "v2.0.7",
      "cpe": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0?package-id=dfa5a5543aa9055f",
      "type": "library",
      "name": "github.com/hashicorp/hcl/v2",
      "version": "v2.24.0",
      "cpe": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2QJdZ454DSsYGoaE6QheQZjtKZSUs9Nh2izTWiwQxvE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0?package-id=a8aaf0ef7fa21b8e",
      "type": "library",
      "name": "github.com/hashicorp/hcl/v2",
      "version": "v2.24.0",
      "cpe": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2QJdZ454DSsYGoaE6QheQZjtKZSUs9Nh2izTWiwQxvE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=8b57aff5a5161c71",
      "type": "library",
      "name": "github.com/huandu/xstrings",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/huandu/xstrings@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=bff9c21c1b74c39b",
      "type": "library",
      "name": "github.com/huandu/xstrings",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/huandu/xstrings@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0?package-id=9539d77144a27ae5",
      "type": "library",
      "name": "github.com/in-toto/in-toto-golang",
      "version": "v0.9.0",
      "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in-toto-golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tHny7ac4KgtsfrG6ybU8gVOZux2H8jN05AXJ9EBM1XU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0?package-id=bd93b77abd95c74d",
      "type": "library",
      "name": "github.com/in-toto/in-toto-golang",
      "version": "v0.9.0",
      "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in-toto-golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in_toto_golang:v0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tHny7ac4KgtsfrG6ybU8gVOZux2H8jN05AXJ9EBM1XU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=044872dda80b944e",
      "type": "library",
      "name": "github.com/jbenet/go-context",
      "version": "v0.0.0-20150711004518-d14ea06fba99",
      "cpe": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=6a49a7a93a95cab8",
      "type": "library",
      "name": "github.com/jbenet/go-context",
      "version": "v0.0.0-20150711004518-d14ea06fba99",
      "cpe": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=01dea6abfcb8800f",
      "type": "library",
      "name": "github.com/jedisct1/go-minisign",
      "version": "v0.0.0-20230811132847-661be99b8267",
      "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=3ef3fd0b6b459b31",
      "type": "library",
      "name": "github.com/jedisct1/go-minisign",
      "version": "v0.0.0-20230811132847-661be99b8267",
      "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=faf031a9b262b9e7",
      "type": "library",
      "name": "github.com/jmoiron/sqlx",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:jmoiron:sqlx:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=792904a7d3441665",
      "type": "library",
      "name": "github.com/jmoiron/sqlx",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:jmoiron:sqlx:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=deed1734bcfb0ecc",
      "type": "library",
      "name": "github.com/json-iterator/go",
      "version": "v1.1.12",
      "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=50999fe733e4d1ea",
      "type": "library",
      "name": "github.com/json-iterator/go",
      "version": "v1.1.12",
      "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0?package-id=dc707fb25fbe5b60",
      "type": "library",
      "name": "github.com/kevinburke/ssh_config",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0?package-id=0f4c88384acff7c0",
      "type": "library",
      "name": "github.com/kevinburke/ssh_config",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.1?package-id=5739ce2a37275954",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:klauspost:compress:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.1?package-id=4c37329475476c0f",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:klauspost:compress:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f?package-id=a8ed534e6a7ee5d6",
      "type": "library",
      "name": "github.com/knqyf263/go-apk-version",
      "version": "v0.0.0-20200609155635-041fdbb8563f",
      "cpe": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GvCU5GXhHq+7LeOzx/haG7HSIZokl3/0GkoUFzsRJjg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f?package-id=7ac9d5afec4659d1",
      "type": "library",
      "name": "github.com/knqyf263/go-apk-version",
      "version": "v0.0.0-20200609155635-041fdbb8563f",
      "cpe": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GvCU5GXhHq+7LeOzx/haG7HSIZokl3/0GkoUFzsRJjg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23?package-id=84d9db4cf87ea629",
      "type": "library",
      "name": "github.com/knqyf263/go-deb-version",
      "version": "v0.0.0-20241115132648-6f4aee6ccd23",
      "cpe": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dWzdsqjh1p2gNtRKqNwuBvKqMNwnLOPLzVZT1n6DK7s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23?package-id=5013943c8ddf4b30",
      "type": "library",
      "name": "github.com/knqyf263/go-deb-version",
      "version": "v0.0.0-20241115132648-6f4aee6ccd23",
      "cpe": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dWzdsqjh1p2gNtRKqNwuBvKqMNwnLOPLzVZT1n6DK7s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075?package-id=108dbc6146557c99",
      "type": "library",
      "name": "github.com/knqyf263/go-rpm-version",
      "version": "v0.0.0-20220614171824-631e686d1075",
      "cpe": "cpe:2.3:a:knqyf263:go-rpm-version:v0.0.0-20220614171824-631e686d1075:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_rpm_version:v0.0.0-20220614171824-631e686d1075:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aC6MEAs3PE3lWD7lqrJfDxHd6hcced9R4JTZu85cJwU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075?package-id=5b15a2cd48763772",
      "type": "library",
      "name": "github.com/knqyf263/go-rpm-version",
      "version": "v0.0.0-20220614171824-631e686d1075",
      "cpe": "cpe:2.3:a:knqyf263:go-rpm-version:v0.0.0-20220614171824-631e686d1075:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_rpm_version:v0.0.0-20220614171824-631e686d1075:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aC6MEAs3PE3lWD7lqrJfDxHd6hcced9R4JTZu85cJwU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1?package-id=9a4e21dca1b16e4c",
      "type": "library",
      "name": "github.com/knqyf263/go-rpmdb",
      "version": "v0.1.1",
      "cpe": "cpe:2.3:a:knqyf263:go-rpmdb:v0.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_rpmdb:v0.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oh68mTCvp1XzxdU7EfafcWzzfstUZAEa3MW0IJye584="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1?package-id=11445ee818ffdd58",
      "type": "library",
      "name": "github.com/knqyf263/go-rpmdb",
      "version": "v0.1.1",
      "cpe": "cpe:2.3:a:knqyf263:go-rpmdb:v0.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:knqyf263:go_rpmdb:v0.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oh68mTCvp1XzxdU7EfafcWzzfstUZAEa3MW0IJye584="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/nested@v0.0.1?package-id=9135e0730943f1d6",
      "type": "library",
      "name": "github.com/knqyf263/nested",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:knqyf263:nested:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/nested@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sv26CegUMhjt19zqbBKntjwESdxe5hxVPSk0+AKjdUc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/nested@v0.0.1?package-id=8f74ccf445055e4f",
      "type": "library",
      "name": "github.com/knqyf263/nested",
      "version": "v0.0.1",
      "cpe": "cpe:2.3:a:knqyf263:nested:v0.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/knqyf263/nested@v0.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sv26CegUMhjt19zqbBKntjwESdxe5hxVPSk0+AKjdUc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=8b883c5de355133b",
      "type": "library",
      "name": "github.com/kylelemons/godebug",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=c20b64f5b6dd04b7",
      "type": "library",
      "name": "github.com/kylelemons/godebug",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=c77394eb0332d7e6",
      "type": "library",
      "name": "github.com/lann/builder",
      "version": "v0.0.0-20180802200727-47ae307949d0",
      "cpe": "cpe:2.3:a:lann:builder:v0.0.0-20180802200727-47ae307949d0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=edc9eaeaba721f20",
      "type": "library",
      "name": "github.com/lann/builder",
      "version": "v0.0.0-20180802200727-47ae307949d0",
      "cpe": "cpe:2.3:a:lann:builder:v0.0.0-20180802200727-47ae307949d0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=5ca6f91598f6b80f",
      "type": "library",
      "name": "github.com/lann/ps",
      "version": "v0.0.0-20150810152359-62de8c46ede0",
      "cpe": "cpe:2.3:a:lann:ps:v0.0.0-20150810152359-62de8c46ede0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=42397f728b6ace56",
      "type": "library",
      "name": "github.com/lann/ps",
      "version": "v0.0.0-20150810152359-62de8c46ede0",
      "cpe": "cpe:2.3:a:lann:ps:v0.0.0-20150810152359-62de8c46ede0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=13fadbf35c629fbf",
      "type": "library",
      "name": "github.com/lestrrat-go/blackmagic",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=06e72cfb4366117e",
      "type": "library",
      "name": "github.com/lestrrat-go/blackmagic",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0?package-id=8654e65c7309afca",
      "type": "library",
      "name": "github.com/lestrrat-go/dsig",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:dsig:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:dsig:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:OE09s2r9Z81kxzJYRn07TFM9XA4akrUdoMwr0L8xj38="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0?package-id=1b3ec217160ad272",
      "type": "library",
      "name": "github.com/lestrrat-go/dsig",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:dsig:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:dsig:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:OE09s2r9Z81kxzJYRn07TFM9XA4akrUdoMwr0L8xj38="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=5092cedd6b157994",
      "type": "library",
      "name": "github.com/lestrrat-go/httpcc",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=a87d6f5995e522e9",
      "type": "library",
      "name": "github.com/lestrrat-go/httpcc",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1?package-id=ecbe2f3d777917ef",
      "type": "library",
      "name": "github.com/lestrrat-go/httprc/v3",
      "version": "v3.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3n7Es68YYGZb2Jf+k//llA4FTZMl3yCwIjFIk4ubevI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1?package-id=e19f114d4b4a28d5",
      "type": "library",
      "name": "github.com/lestrrat-go/httprc/v3",
      "version": "v3.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3n7Es68YYGZb2Jf+k//llA4FTZMl3yCwIjFIk4ubevI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11?package-id=251709e40bd21800",
      "type": "library",
      "name": "github.com/lestrrat-go/jwx/v3",
      "version": "v3.0.11",
      "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yEeUGNUuNjcez/Voxvr7XPTYNraSQTENJgtVTfwvG/w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11?package-id=ad00778c3141c42e",
      "type": "library",
      "name": "github.com/lestrrat-go/jwx/v3",
      "version": "v3.0.11",
      "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yEeUGNUuNjcez/Voxvr7XPTYNraSQTENJgtVTfwvG/w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option@v1.0.1?package-id=7054b59339fae1fa",
      "type": "library",
      "name": "github.com/lestrrat-go/option",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:option:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:option:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:option:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option@v1.0.1?package-id=75de1aa48d338707",
      "type": "library",
      "name": "github.com/lestrrat-go/option",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:option:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:option:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:option:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=81b54a44459d0f76",
      "type": "library",
      "name": "github.com/lestrrat-go/option/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=d6110f867782c124",
      "type": "library",
      "name": "github.com/lestrrat-go/option/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec?package-id=e5e9e3bd422c2aea",
      "type": "library",
      "name": "github.com/letsencrypt/boulder",
      "version": "v0.0.0-20240620165639-de9c06129bec",
      "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.0.0-20240620165639-de9c06129bec:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2tTW6cDth2TSgRbAhD7yjZzTQmcN25sDRPEeinR51yQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec?package-id=472dbf1050ae01c5",
      "type": "library",
      "name": "github.com/letsencrypt/boulder",
      "version": "v0.0.0-20240620165639-de9c06129bec",
      "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.0.0-20240620165639-de9c06129bec:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2tTW6cDth2TSgRbAhD7yjZzTQmcN25sDRPEeinR51yQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lib/pq@v1.10.9?package-id=fe9af43e95bb810b",
      "type": "library",
      "name": "github.com/lib/pq",
      "version": "v1.10.9",
      "cpe": "cpe:2.3:a:lib:pq:v1.10.9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lib/pq@v1.10.9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lib/pq@v1.10.9?package-id=c777a8fa397c2ab4",
      "type": "library",
      "name": "github.com/lib/pq",
      "version": "v1.10.9",
      "cpe": "cpe:2.3:a:lib:pq:v1.10.9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lib/pq@v1.10.9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=b4375eb876cd9eb1",
      "type": "library",
      "name": "github.com/liggitt/tabwriter",
      "version": "v0.0.0-20181228230101-89fcab3d43de",
      "cpe": "cpe:2.3:a:liggitt:tabwriter:v0.0.0-20181228230101-89fcab3d43de:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9TO3cAIGXtEhnIaL+V+BEER86oLrvS+kWobKpbJuye0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=8f3cf0b7ca1d9c44",
      "type": "library",
      "name": "github.com/liggitt/tabwriter",
      "version": "v0.0.0-20181228230101-89fcab3d43de",
      "cpe": "cpe:2.3:a:liggitt:tabwriter:v0.0.0-20181228230101-89fcab3d43de:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9TO3cAIGXtEhnIaL+V+BEER86oLrvS+kWobKpbJuye0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40?package-id=1471731d6a2df4ea",
      "type": "library",
      "name": "github.com/lunixbochs/struc",
      "version": "v0.0.0-20200707160740-784aaebc1d40",
      "cpe": "cpe:2.3:a:lunixbochs:struc:v0.0.0-20200707160740-784aaebc1d40:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EnfXoSqDfSNJv0VBNqY/88RNnhSGYkrHaO0mmFGbVsc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40?package-id=22b31ad51bfc74e0",
      "type": "library",
      "name": "github.com/lunixbochs/struc",
      "version": "v0.0.0-20200707160740-784aaebc1d40",
      "cpe": "cpe:2.3:a:lunixbochs:struc:v0.0.0-20200707160740-784aaebc1d40:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EnfXoSqDfSNJv0VBNqY/88RNnhSGYkrHaO0mmFGbVsc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee?package-id=859225e1915798e1",
      "type": "library",
      "name": "github.com/masahiro331/go-disk",
      "version": "v0.0.0-20240625071113-56c933208fee",
      "cpe": "cpe:2.3:a:masahiro331:go-disk:v0.0.0-20240625071113-56c933208fee:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_disk:v0.0.0-20240625071113-56c933208fee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cgm8mE25x5XXX2oyvJDlyJ72K+rDu/4ZCYce2worNb8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee?package-id=899f8e283dc6062d",
      "type": "library",
      "name": "github.com/masahiro331/go-disk",
      "version": "v0.0.0-20240625071113-56c933208fee",
      "cpe": "cpe:2.3:a:masahiro331:go-disk:v0.0.0-20240625071113-56c933208fee:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_disk:v0.0.0-20240625071113-56c933208fee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cgm8mE25x5XXX2oyvJDlyJ72K+rDu/4ZCYce2worNb8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e?package-id=bbca5bef6da63f33",
      "type": "library",
      "name": "github.com/masahiro331/go-ebs-file",
      "version": "v0.0.0-20240917043618-e6d2bea5c32e",
      "cpe": "cpe:2.3:a:masahiro331:go-ebs-file:v0.0.0-20240917043618-e6d2bea5c32e:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_ebs_file:v0.0.0-20240917043618-e6d2bea5c32e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nCgF1JEYIS8KNuJtIeUrmjjhktIMKWNmASZqwK2ynu0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e?package-id=b838fd099bef9cb3",
      "type": "library",
      "name": "github.com/masahiro331/go-ebs-file",
      "version": "v0.0.0-20240917043618-e6d2bea5c32e",
      "cpe": "cpe:2.3:a:masahiro331:go-ebs-file:v0.0.0-20240917043618-e6d2bea5c32e:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_ebs_file:v0.0.0-20240917043618-e6d2bea5c32e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nCgF1JEYIS8KNuJtIeUrmjjhktIMKWNmASZqwK2ynu0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd?package-id=dd7792209f69bc99",
      "type": "library",
      "name": "github.com/masahiro331/go-ext4-filesystem",
      "version": "v0.0.0-20240620024024-ca14e6327bbd",
      "cpe": "cpe:2.3:a:masahiro331:go-ext4-filesystem:v0.0.0-20240620024024-ca14e6327bbd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_ext4_filesystem:v0.0.0-20240620024024-ca14e6327bbd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JEIW94K3spsvBI5Xb9PGhKSIza9/jxO1lF30tPCAJlA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd?package-id=711ea783aecca1c1",
      "type": "library",
      "name": "github.com/masahiro331/go-ext4-filesystem",
      "version": "v0.0.0-20240620024024-ca14e6327bbd",
      "cpe": "cpe:2.3:a:masahiro331:go-ext4-filesystem:v0.0.0-20240620024024-ca14e6327bbd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_ext4_filesystem:v0.0.0-20240620024024-ca14e6327bbd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JEIW94K3spsvBI5Xb9PGhKSIza9/jxO1lF30tPCAJlA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a?package-id=b6079cd7710e3a9d",
      "type": "library",
      "name": "github.com/masahiro331/go-mvn-version",
      "version": "v0.0.0-20250131095131-f4974fa13b8a",
      "cpe": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:eLvAzVoRfHEOl64OxFhepPf3vj7SKvXY/tFc3BS0b7s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a?package-id=c1892a785b57a040",
      "type": "library",
      "name": "github.com/masahiro331/go-mvn-version",
      "version": "v0.0.0-20250131095131-f4974fa13b8a",
      "cpe": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:eLvAzVoRfHEOl64OxFhepPf3vj7SKvXY/tFc3BS0b7s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd?package-id=8c7208e570fbdb1c",
      "type": "library",
      "name": "github.com/masahiro331/go-vmdk-parser",
      "version": "v0.0.0-20221225061455-612096e4bbbd",
      "cpe": "cpe:2.3:a:masahiro331:go-vmdk-parser:v0.0.0-20221225061455-612096e4bbbd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_vmdk_parser:v0.0.0-20221225061455-612096e4bbbd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Y30EzvuoVp97b0unb/GOFXzBUKRXZXUN2e0wYmvC+ic="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd?package-id=dce6a0bd41eeb4ed",
      "type": "library",
      "name": "github.com/masahiro331/go-vmdk-parser",
      "version": "v0.0.0-20221225061455-612096e4bbbd",
      "cpe": "cpe:2.3:a:masahiro331:go-vmdk-parser:v0.0.0-20221225061455-612096e4bbbd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_vmdk_parser:v0.0.0-20221225061455-612096e4bbbd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Y30EzvuoVp97b0unb/GOFXzBUKRXZXUN2e0wYmvC+ic="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44?package-id=dd49045b0f3657fb",
      "type": "library",
      "name": "github.com/masahiro331/go-xfs-filesystem",
      "version": "v0.0.0-20231205045356-1b22259a6c44",
      "cpe": "cpe:2.3:a:masahiro331:go-xfs-filesystem:v0.0.0-20231205045356-1b22259a6c44:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_xfs_filesystem:v0.0.0-20231205045356-1b22259a6c44:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VmSjn0UCyfXUNdePDr7uM/uZTnGSp+mKD5+cYkEoLx4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44?package-id=267525a486728162",
      "type": "library",
      "name": "github.com/masahiro331/go-xfs-filesystem",
      "version": "v0.0.0-20231205045356-1b22259a6c44",
      "cpe": "cpe:2.3:a:masahiro331:go-xfs-filesystem:v0.0.0-20231205045356-1b22259a6c44:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:masahiro331:go_xfs_filesystem:v0.0.0-20231205045356-1b22259a6c44:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VmSjn0UCyfXUNdePDr7uM/uZTnGSp+mKD5+cYkEoLx4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=d4115bc31f009139",
      "type": "library",
      "name": "github.com/mattn/go-colorable",
      "version": "v0.1.14",
      "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=7b6a4bdba7996684",
      "type": "library",
      "name": "github.com/mattn/go-colorable",
      "version": "v0.1.14",
      "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=c0358e588dd85867",
      "type": "library",
      "name": "github.com/mattn/go-isatty",
      "version": "v0.0.20",
      "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=149cae8a7177284a",
      "type": "library",
      "name": "github.com/mattn/go-isatty",
      "version": "v0.0.20",
      "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=a8c0ae4909a8f542",
      "type": "library",
      "name": "github.com/mattn/go-runewidth",
      "version": "v0.0.16",
      "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=9438b844f199ffce",
      "type": "library",
      "name": "github.com/mattn/go-runewidth",
      "version": "v0.0.16",
      "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12?package-id=25af82268556a2e1",
      "type": "library",
      "name": "github.com/mattn/go-shellwords",
      "version": "v1.0.12",
      "cpe": "cpe:2.3:a:mattn:go-shellwords:v1.0.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_shellwords:v1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:M2zGm7EW6UQJvDeQxo4T51eKPurbeFbe8WtebGE2xrk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12?package-id=e47aa82f88a841b7",
      "type": "library",
      "name": "github.com/mattn/go-shellwords",
      "version": "v1.0.12",
      "cpe": "cpe:2.3:a:mattn:go-shellwords:v1.0.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mattn:go_shellwords:v1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:M2zGm7EW6UQJvDeQxo4T51eKPurbeFbe8WtebGE2xrk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=6b7a5e1d904deb35",
      "type": "library",
      "name": "github.com/mitchellh/copystructure",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=3e01939d594978cf",
      "type": "library",
      "name": "github.com/mitchellh/copystructure",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=6bb0810887799a82",
      "type": "library",
      "name": "github.com/mitchellh/go-homedir",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=1ec59c4d46414eca",
      "type": "library",
      "name": "github.com/mitchellh/go-homedir",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=41c731bde5a887e6",
      "type": "library",
      "name": "github.com/mitchellh/go-wordwrap",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=4bbea5853c259db8",
      "type": "library",
      "name": "github.com/mitchellh/go-wordwrap",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2?package-id=109418670cddac09",
      "type": "library",
      "name": "github.com/mitchellh/hashstructure/v2",
      "version": "v2.0.2",
      "cpe": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2?package-id=a22bd29b86a98086",
      "type": "library",
      "name": "github.com/mitchellh/hashstructure/v2",
      "version": "v2.0.2",
      "cpe": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=846f1637b8e25541",
      "type": "library",
      "name": "github.com/mitchellh/mapstructure",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=8ea15831f22a7272",
      "type": "library",
      "name": "github.com/mitchellh/mapstructure",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=df456163dc003f6e",
      "type": "library",
      "name": "github.com/mitchellh/reflectwalk",
      "version": "v1.0.2",
      "cpe": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=691083ac9a02e1e6",
      "type": "library",
      "name": "github.com/mitchellh/reflectwalk",
      "version": "v1.0.2",
      "cpe": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/buildkit@v0.26.2?package-id=b3f0dee168c74382",
      "type": "library",
      "name": "github.com/moby/buildkit",
      "version": "v0.26.2",
      "cpe": "cpe:2.3:a:moby:buildkit:v0.26.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/buildkit@v0.26.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EIh5j0gzRsCZmQzvgNNWzSDbuKqwUIiBH7ssqLv8RU8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/buildkit@v0.26.2?package-id=81773755dbe2d5d7",
      "type": "library",
      "name": "github.com/moby/buildkit",
      "version": "v0.26.2",
      "cpe": "cpe:2.3:a:moby:buildkit:v0.26.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/buildkit@v0.26.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EIh5j0gzRsCZmQzvgNNWzSDbuKqwUIiBH7ssqLv8RU8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=3bb1f6ddaa519cc8",
      "type": "library",
      "name": "github.com/moby/docker-image-spec",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=6ae8c844982b197c",
      "type": "library",
      "name": "github.com/moby/docker-image-spec",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/locker@v1.0.1?package-id=0b2e7a470836e93f",
      "type": "library",
      "name": "github.com/moby/locker",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/locker@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/locker@v1.0.1?package-id=b0298f1745a3f85f",
      "type": "library",
      "name": "github.com/moby/locker",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/locker@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/moby/api@v1.52.0?package-id=76d7bca4e303c21a",
      "type": "library",
      "name": "github.com/moby/moby/api",
      "version": "v1.52.0",
      "cpe": "cpe:2.3:a:moby:moby\\/api:v1.52.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/moby/api@v1.52.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:00BtlJY4MXkkt84WhUZPRqt5TvPbgig2FZvTbe3igYg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/moby/api@v1.52.0?package-id=7935bc8c5d001708",
      "type": "library",
      "name": "github.com/moby/moby/api",
      "version": "v1.52.0",
      "cpe": "cpe:2.3:a:moby:moby\\/api:v1.52.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/moby/api@v1.52.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:00BtlJY4MXkkt84WhUZPRqt5TvPbgig2FZvTbe3igYg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/moby/client@v0.1.0?package-id=75d15a59b14de9af",
      "type": "library",
      "name": "github.com/moby/moby/client",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:moby\\/client:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/moby/client@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nt+hn6O9cyJQqq5UWnFGqsZRTS/JirUqzPjEl0Bdc/8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/moby/client@v0.1.0?package-id=3fbaef78c0551b2c",
      "type": "library",
      "name": "github.com/moby/moby/client",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:moby\\/client:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/moby/client@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nt+hn6O9cyJQqq5UWnFGqsZRTS/JirUqzPjEl0Bdc/8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/spdystream@v0.5.0?package-id=7e04f2de8b3d4807",
      "type": "library",
      "name": "github.com/moby/spdystream",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:moby:spdystream:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/spdystream@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7r0J1Si3QO/kjRitvSLVVFUjxMEb/YLj6S9FF62JBCU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/spdystream@v0.5.0?package-id=e2e21e22fa264041",
      "type": "library",
      "name": "github.com/moby/spdystream",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:moby:spdystream:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/spdystream@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7r0J1Si3QO/kjRitvSLVVFUjxMEb/YLj6S9FF62JBCU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0?package-id=a4ba8c451886ba42",
      "type": "library",
      "name": "github.com/moby/sys/atomicwriter",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0?package-id=afdd822f8946c16e",
      "type": "library",
      "name": "github.com/moby/sys/atomicwriter",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2?package-id=c7268d3c86d3f904",
      "type": "library",
      "name": "github.com/moby/sys/mountinfo",
      "version": "v0.7.2",
      "cpe": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2?package-id=f250fa6f2dff6745",
      "type": "library",
      "name": "github.com/moby/sys/mountinfo",
      "version": "v0.7.2",
      "cpe": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/sequential@v0.6.0?package-id=8b3ec495511a4df9",
      "type": "library",
      "name": "github.com/moby/sys/sequential",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qrx7XFUd/5DxtqcoH1h438hF5TmOvzC/lspjy7zgvCU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/sequential@v0.6.0?package-id=a0020a5a224b85d7",
      "type": "library",
      "name": "github.com/moby/sys/sequential",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qrx7XFUd/5DxtqcoH1h438hF5TmOvzC/lspjy7zgvCU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/signal@v0.7.1?package-id=5f24af718db8c601",
      "type": "library",
      "name": "github.com/moby/sys/signal",
      "version": "v0.7.1",
      "cpe": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PrQxdvxcGijdo6UXXo/lU/TvHUWyPhj7UOpSo8tuvk0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/signal@v0.7.1?package-id=96a656f16004c3da",
      "type": "library",
      "name": "github.com/moby/sys/signal",
      "version": "v0.7.1",
      "cpe": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PrQxdvxcGijdo6UXXo/lU/TvHUWyPhj7UOpSo8tuvk0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/user@v0.4.0?package-id=1698e4616dad3612",
      "type": "library",
      "name": "github.com/moby/sys/user",
      "version": "v0.4.0",
      "cpe": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/user@v0.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jhcMKit7SA80hivmFJcbB1vqmw//wU61Zdui2eQXuMs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/user@v0.4.0?package-id=94250e886b5acf57",
      "type": "library",
      "name": "github.com/moby/sys/user",
      "version": "v0.4.0",
      "cpe": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/user@v0.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jhcMKit7SA80hivmFJcbB1vqmw//wU61Zdui2eQXuMs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/userns@v0.1.0?package-id=9b3b13b38193bb5f",
      "type": "library",
      "name": "github.com/moby/sys/userns",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tVLXkFOxVu9A64/yh59slHVv9ahO9UIev4JZusOLG/g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/userns@v0.1.0?package-id=10cfdea95b7181fc",
      "type": "library",
      "name": "github.com/moby/sys/userns",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tVLXkFOxVu9A64/yh59slHVv9ahO9UIev4JZusOLG/g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=03a78bd9133352c9",
      "type": "library",
      "name": "github.com/moby/term",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/term@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=8c5931133c868734",
      "type": "library",
      "name": "github.com/moby/term",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/term@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=8ed43c2874f3198d",
      "type": "library",
      "name": "github.com/modern-go/concurrent",
      "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
      "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=82f6880d5991409a",
      "type": "library",
      "name": "github.com/modern-go/concurrent",
      "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
      "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=f46524d209fc6451",
      "type": "library",
      "name": "github.com/modern-go/reflect2",
      "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
      "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=5a7120d8587a736d",
      "type": "library",
      "name": "github.com/modern-go/reflect2",
      "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
      "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=d3415508da93f5e2",
      "type": "library",
      "name": "github.com/monochromegane/go-gitignore",
      "version": "v0.0.0-20200626010858-205db1a8cc00",
      "cpe": "cpe:2.3:a:monochromegane:go-gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:monochromegane:go_gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n6/2gBQ3RWajuToeY6ZtZTIKv2v7ThUy5KKusIT0yc0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=ab2bd20ba094da55",
      "type": "library",
      "name": "github.com/monochromegane/go-gitignore",
      "version": "v0.0.0-20200626010858-205db1a8cc00",
      "cpe": "cpe:2.3:a:monochromegane:go-gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:monochromegane:go_gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n6/2gBQ3RWajuToeY6ZtZTIKv2v7ThUy5KKusIT0yc0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=e537e6a45c2f89a3",
      "type": "library",
      "name": "github.com/morikuni/aec",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:morikuni:aec:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/morikuni/aec@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=9596fef7ea46cd76",
      "type": "library",
      "name": "github.com/morikuni/aec",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:morikuni:aec:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/morikuni/aec@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=5acf34f4ce83ac3e",
      "type": "library",
      "name": "github.com/munnerz/goautoneg",
      "version": "v0.0.0-20191010083416-a7dc8b61c822",
      "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=4ee4676fb737d169",
      "type": "library",
      "name": "github.com/munnerz/goautoneg",
      "version": "v0.0.0-20191010083416-a7dc8b61c822",
      "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f?package-id=891d2fda3bd85652",
      "type": "library",
      "name": "github.com/mxk/go-flowrate",
      "version": "v0.0.0-20140419014527-cca7078d478f",
      "cpe": "cpe:2.3:a:mxk:go-flowrate:v0.0.0-20140419014527-cca7078d478f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mxk:go_flowrate:v0.0.0-20140419014527-cca7078d478f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f?package-id=d4f10490bc1253e0",
      "type": "library",
      "name": "github.com/mxk/go-flowrate",
      "version": "v0.0.0-20140419014527-cca7078d478f",
      "cpe": "cpe:2.3:a:mxk:go-flowrate:v0.0.0-20140419014527-cca7078d478f:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mxk:go_flowrate:v0.0.0-20140419014527-cca7078d478f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=3e139b404feda467",
      "type": "library",
      "name": "github.com/nozzle/throttler",
      "version": "v0.0.0-20180817012639-2ea982251481",
      "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=9e51474d00fdb8c4",
      "type": "library",
      "name": "github.com/nozzle/throttler",
      "version": "v0.0.0-20180817012639-2ea982251481",
      "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid@v1.3.1?package-id=fbc5b807c346f490",
      "type": "library",
      "name": "github.com/oklog/ulid",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:oklog:ulid:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oklog/ulid@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EGfNDEx6MqHz8B3uNV6QAib1UR2Lm97sHi3ocA6ESJ4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid@v1.3.1?package-id=acbe15e15ea76b81",
      "type": "library",
      "name": "github.com/oklog/ulid",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:oklog:ulid:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oklog/ulid@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EGfNDEx6MqHz8B3uNV6QAib1UR2Lm97sHi3ocA6ESJ4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=6f2c1b8f811d9a51",
      "type": "library",
      "name": "github.com/oklog/ulid/v2",
      "version": "v2.1.1",
      "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=1b233a406d19956a",
      "type": "library",
      "name": "github.com/oklog/ulid/v2",
      "version": "v2.1.1",
      "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.10.1?package-id=255f2f61357ab9d1",
      "type": "library",
      "name": "github.com/open-policy-agent/opa",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy_agent:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open-policy:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:haIvxZSPky8HLjRrvQwWAjCPLg8JDFSZMbbG4yyUHgY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.10.1?package-id=eabab9458884dccd",
      "type": "library",
      "name": "github.com/open-policy-agent/opa",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy_agent:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open-policy:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open:opa:v1.10.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:haIvxZSPky8HLjRrvQwWAjCPLg8JDFSZMbbG4yyUHgY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=a6007585264006e8",
      "type": "library",
      "name": "github.com/opencontainers/go-digest",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=deaa535f407f32f7",
      "type": "library",
      "name": "github.com/opencontainers/go-digest",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=303c556ef6500e9d",
      "type": "library",
      "name": "github.com/opencontainers/image-spec",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=6e92f3d2f32de6d2",
      "type": "library",
      "name": "github.com/opencontainers/image-spec",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1?package-id=f5b7d398d910d163",
      "type": "library",
      "name": "github.com/opencontainers/runtime-spec",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:opencontainers:runtime-spec:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:runtime_spec:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:S4k4ryNgEpxW1dzyqffOmhI1BHYcjzU8lpJfSlR0xww="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1?package-id=79228f6b799cb530",
      "type": "library",
      "name": "github.com/opencontainers/runtime-spec",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:opencontainers:runtime-spec:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:runtime_spec:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:S4k4ryNgEpxW1dzyqffOmhI1BHYcjzU8lpJfSlR0xww="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/selinux@v1.13.0?package-id=708705a334565814",
      "type": "library",
      "name": "github.com/opencontainers/selinux",
      "version": "v1.13.0",
      "cpe": "cpe:2.3:a:opencontainers:selinux:v1.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/selinux@v1.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Zza88GWezyT7RLql12URvoxsbLfjFx988+LGaWfbL84="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/selinux@v1.13.0?package-id=8069805f90b012a8",
      "type": "library",
      "name": "github.com/opencontainers/selinux",
      "version": "v1.13.0",
      "cpe": "cpe:2.3:a:opencontainers:selinux:v1.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/selinux@v1.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Zza88GWezyT7RLql12URvoxsbLfjFx988+LGaWfbL84="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553?package-id=48295c2999bd0fe9",
      "type": "library",
      "name": "github.com/openvex/discovery",
      "version": "v0.1.1-0.20240802171711-7c54efc57553",
      "cpe": "cpe:2.3:a:openvex:discovery:v0.1.1-0.20240802171711-7c54efc57553:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:c4u0GIH0w2Q57Pm2Oldrq6EiHFnLCCnRs98A+ggj/YQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553?package-id=e025a4459c83e4f6",
      "type": "library",
      "name": "github.com/openvex/discovery",
      "version": "v0.1.1-0.20240802171711-7c54efc57553",
      "cpe": "cpe:2.3:a:openvex:discovery:v0.1.1-0.20240802171711-7c54efc57553:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:c4u0GIH0w2Q57Pm2Oldrq6EiHFnLCCnRs98A+ggj/YQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/openvex/go-vex@v0.2.7?package-id=48382e36124c8c6b",
      "type": "library",
      "name": "github.com/openvex/go-vex",
      "version": "v0.2.7",
      "cpe": "cpe:2.3:a:openvex:go-vex:v0.2.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/openvex/go-vex@v0.2.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openvex:go_vex:v0.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/pN3bqvS4QOc6WkkL0hbKzJuAtsUD9vmvk9IZkzD3Zc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/openvex/go-vex@v0.2.7?package-id=7bb2219a7d25545a",
      "type": "library",
      "name": "github.com/openvex/go-vex",
      "version": "v0.2.7",
      "cpe": "cpe:2.3:a:openvex:go-vex:v0.2.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/openvex/go-vex@v0.2.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openvex:go_vex:v0.2.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/pN3bqvS4QOc6WkkL0hbKzJuAtsUD9vmvk9IZkzD3Zc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3?package-id=2219995d09d4a181",
      "type": "library",
      "name": "github.com/owenrumney/go-sarif/v2",
      "version": "v2.3.3",
      "cpe": "cpe:2.3:a:owenrumney:go-sarif\\/v2:v2.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:owenrumney:go_sarif\\/v2:v2.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ubWDJcF5i3L/EIOER+ZyQ03IfplbSU1BLOE26uKQIIU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3?package-id=4a0430f41dcecc09",
      "type": "library",
      "name": "github.com/owenrumney/go-sarif/v2",
      "version": "v2.3.3",
      "cpe": "cpe:2.3:a:owenrumney:go-sarif\\/v2:v2.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:owenrumney:go_sarif\\/v2:v2.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ubWDJcF5i3L/EIOER+ZyQ03IfplbSU1BLOE26uKQIIU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/owenrumney/squealer@v1.2.11?package-id=7d08f62d5da0e430",
      "type": "library",
      "name": "github.com/owenrumney/squealer",
      "version": "v1.2.11",
      "cpe": "cpe:2.3:a:owenrumney:squealer:v1.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/owenrumney/squealer@v1.2.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vMudrj70VeOzY+t7Phz9Yo0wAgm4kXes9DcTLBVDqGY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/owenrumney/squealer@v1.2.11?package-id=e6f7f0d55c246fba",
      "type": "library",
      "name": "github.com/owenrumney/squealer",
      "version": "v1.2.11",
      "cpe": "cpe:2.3:a:owenrumney:squealer:v1.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/owenrumney/squealer@v1.2.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vMudrj70VeOzY+t7Phz9Yo0wAgm4kXes9DcTLBVDqGY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.3?package-id=dd0740a808c0bc2f",
      "type": "library",
      "name": "github.com/package-url/packageurl-go",
      "version": "v0.1.3",
      "cpe": "cpe:2.3:a:package-url:packageurl-go:v0.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_url:packageurl-go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:packageurl-go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.3?package-id=e7406c1b10721ffd",
      "type": "library",
      "name": "github.com/package-url/packageurl-go",
      "version": "v0.1.3",
      "cpe": "cpe:2.3:a:package-url:packageurl-go:v0.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_url:packageurl-go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:packageurl-go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:packageurl_go:v0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2?package-id=832d12447960972a",
      "type": "library",
      "name": "github.com/pandatix/go-cvss",
      "version": "v0.6.2",
      "cpe": "cpe:2.3:a:pandatix:go-cvss:v0.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pandatix:go_cvss:v0.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TFiHlzUkT67s6UkelHmK6s1INKVUG7nlKYiWWDTITGI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2?package-id=1fd4f055db413fc7",
      "type": "library",
      "name": "github.com/pandatix/go-cvss",
      "version": "v0.6.2",
      "cpe": "cpe:2.3:a:pandatix:go-cvss:v0.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pandatix:go_cvss:v0.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TFiHlzUkT67s6UkelHmK6s1INKVUG7nlKYiWWDTITGI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=96b26b551e9a7352",
      "type": "library",
      "name": "github.com/pelletier/go-toml/v2",
      "version": "v2.2.4",
      "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=84b38c73b413f7bf",
      "type": "library",
      "name": "github.com/pelletier/go-toml/v2",
      "version": "v2.2.4",
      "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible?package-id=fe5f3797aab904e7",
      "type": "library",
      "name": "github.com/peterbourgon/diskv",
      "version": "v2.0.1+incompatible",
      "cpe": "cpe:2.3:a:peterbourgon:diskv:v2.0.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible?package-id=09224c104935bff7",
      "type": "library",
      "name": "github.com/peterbourgon/diskv",
      "version": "v2.0.1+incompatible",
      "cpe": "cpe:2.3:a:peterbourgon:diskv:v2.0.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2?package-id=c38ed4019bef48b5",
      "type": "library",
      "name": "github.com/pjbgf/sha1cd",
      "version": "v0.3.2",
      "cpe": "cpe:2.3:a:pjbgf:sha1cd:v0.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:a9wb0bp1oC2TGwStyn0Umc/IGKQnEgF0vVaZ8QF8eo4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2?package-id=81e28ed131edcc56",
      "type": "library",
      "name": "github.com/pjbgf/sha1cd",
      "version": "v0.3.2",
      "cpe": "cpe:2.3:a:pjbgf:sha1cd:v0.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:a9wb0bp1oC2TGwStyn0Umc/IGKQnEgF0vVaZ8QF8eo4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=0cad9575be669130",
      "type": "library",
      "name": "github.com/pkg/browser",
      "version": "v0.0.0-20240102092130-5ac0b6a4141c",
      "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=32ed9882dc6e9e92",
      "type": "library",
      "name": "github.com/pkg/browser",
      "version": "v0.0.0-20240102092130-5ac0b6a4141c",
      "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=0397c96eedbe016f",
      "type": "library",
      "name": "github.com/pkg/errors",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=41e59934afabc5d7",
      "type": "library",
      "name": "github.com/pkg/errors",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=7ba766e3e1b3fadb",
      "type": "library",
      "name": "github.com/planetscale/vtprotobuf",
      "version": "v0.6.1-0.20240319094008-0393e58bdf10",
      "cpe": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=b2a7aa4701629e02",
      "type": "library",
      "name": "github.com/planetscale/vtprotobuf",
      "version": "v0.6.1-0.20240319094008-0393e58bdf10",
      "cpe": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=12626f2405d47964",
      "type": "library",
      "name": "github.com/pmezard/go-difflib",
      "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
      "cpe": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=0e954f3c86af6274",
      "type": "library",
      "name": "github.com/pmezard/go-difflib",
      "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
      "cpe": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=0b94ce449fbbdbea",
      "type": "library",
      "name": "github.com/prometheus/client_golang",
      "version": "v1.23.2",
      "cpe": "cpe:2.3:a:prometheus:client-golang:v1.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/client_golang@v1.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:client_golang:v1.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=489f3c970e674eca",
      "type": "library",
      "name": "github.com/prometheus/client_golang",
      "version": "v1.23.2",
      "cpe": "cpe:2.3:a:prometheus:client-golang:v1.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/client_golang@v1.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:client_golang:v1.23.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=7d2fccd77ae9c52e",
      "type": "library",
      "name": "github.com/prometheus/client_model",
      "version": "v0.6.2",
      "cpe": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=596edd0616ed8034",
      "type": "library",
      "name": "github.com/prometheus/client_model",
      "version": "v0.6.2",
      "cpe": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/common@v0.66.1?package-id=10a8db9746ce895d",
      "type": "library",
      "name": "github.com/prometheus/common",
      "version": "v0.66.1",
      "cpe": "cpe:2.3:a:prometheus:common:v0.66.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/common@v0.66.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/common@v0.66.1?package-id=5aa841ab329dd028",
      "type": "library",
      "name": "github.com/prometheus/common",
      "version": "v0.66.1",
      "cpe": "cpe:2.3:a:prometheus:common:v0.66.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/common@v0.66.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.17.0?package-id=9c78ff2ea57a46f1",
      "type": "library",
      "name": "github.com/prometheus/procfs",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:prometheus:procfs:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/procfs@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7DuK0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.17.0?package-id=400ebeed261fc28a",
      "type": "library",
      "name": "github.com/prometheus/procfs",
      "version": "v0.17.0",
      "cpe": "cpe:2.3:a:prometheus:procfs:v0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/prometheus/procfs@v0.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7DuK0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=955029b9b46c7df2",
      "type": "library",
      "name": "github.com/rcrowley/go-metrics",
      "version": "v0.0.0-20250401214520-65e299d6c5c9",
      "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=1c7daec9aac00a96",
      "type": "library",
      "name": "github.com/rcrowley/go-metrics",
      "version": "v0.0.0-20250401214520-65e299d6c5c9",
      "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=701c1e1d7ebf5508",
      "type": "library",
      "name": "github.com/remyoudompheng/bigfft",
      "version": "v0.0.0-20230129092748-24d4a6f8daec",
      "cpe": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=c3444268211fcf0e",
      "type": "library",
      "name": "github.com/remyoudompheng/bigfft",
      "version": "v0.0.0-20230129092748-24d4a6f8daec",
      "cpe": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=3c884b4a38aa0b24",
      "type": "library",
      "name": "github.com/rivo/uniseg",
      "version": "v0.4.7",
      "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=5b2bae22b34739d4",
      "type": "library",
      "name": "github.com/rivo/uniseg",
      "version": "v0.4.7",
      "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0?package-id=a29976a6910fc5c8",
      "type": "library",
      "name": "github.com/rubenv/sql-migrate",
      "version": "v1.8.0",
      "cpe": "cpe:2.3:a:rubenv:sql-migrate:v1.8.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rubenv:sql_migrate:v1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dXnYiJk9k3wetp7GfQbKJcPHjVJL6YK19tKj8t2Ns0o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0?package-id=3da8432b6279ec11",
      "type": "library",
      "name": "github.com/rubenv/sql-migrate",
      "version": "v1.8.0",
      "cpe": "cpe:2.3:a:rubenv:sql-migrate:v1.8.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rubenv:sql_migrate:v1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dXnYiJk9k3wetp7GfQbKJcPHjVJL6YK19tKj8t2Ns0o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=0a55fef375794ab1",
      "type": "library",
      "name": "github.com/russross/blackfriday/v2",
      "version": "v2.1.0",
      "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=03f51520c1ce0a6b",
      "type": "library",
      "name": "github.com/russross/blackfriday/v2",
      "version": "v2.1.0",
      "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=2c298a02d4085cb8",
      "type": "library",
      "name": "github.com/rust-secure-code/go-rustaudit",
      "version": "v0.0.0-20250226111315-e20ec32e963c",
      "cpe": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8gOLsYwaY2JwlTMT4brS5/9XJdrdIbmk2obvQ748CC0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=efa8967056e39b46",
      "type": "library",
      "name": "github.com/rust-secure-code/go-rustaudit",
      "version": "v0.0.0-20250226111315-e20ec32e963c",
      "cpe": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8gOLsYwaY2JwlTMT4brS5/9XJdrdIbmk2obvQ748CC0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=f2b0b14ce0396b69",
      "type": "library",
      "name": "github.com/sagikazarmark/locafero",
      "version": "v0.11.0",
      "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=413e25c14d745da7",
      "type": "library",
      "name": "github.com/sagikazarmark/locafero",
      "version": "v0.11.0",
      "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/samber/lo@v1.52.0?package-id=112d0c0a08f1a352",
      "type": "library",
      "name": "github.com/samber/lo",
      "version": "v1.52.0",
      "cpe": "cpe:2.3:a:samber:lo:v1.52.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/samber/lo@v1.52.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Rvi+3BFHES3A8meP33VPAxiBZX/Aws5RxrschYGjomw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/samber/lo@v1.52.0?package-id=696a3eb6fd6695a5",
      "type": "library",
      "name": "github.com/samber/lo",
      "version": "v1.52.0",
      "cpe": "cpe:2.3:a:samber:lo:v1.52.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/samber/lo@v1.52.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Rvi+3BFHES3A8meP33VPAxiBZX/Aws5RxrschYGjomw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/samber/oops@v1.18.1?package-id=c2f1c21dbe999f11",
      "type": "library",
      "name": "github.com/samber/oops",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:samber:oops:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/samber/oops@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qjhZbqbdyhWBKntkY8sxrDNKA8b4c5VHlmI1rli7X7M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/samber/oops@v1.18.1?package-id=10383dedefdbb86f",
      "type": "library",
      "name": "github.com/samber/oops",
      "version": "v1.18.1",
      "cpe": "cpe:2.3:a:samber:oops:v1.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/samber/oops@v1.18.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qjhZbqbdyhWBKntkY8sxrDNKA8b4c5VHlmI1rli7X7M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=ddb8aedca5aebdd8",
      "type": "library",
      "name": "github.com/santhosh-tekuri/jsonschema/v6",
      "version": "v6.0.2",
      "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=a0cd0b51462c6bb9",
      "type": "library",
      "name": "github.com/santhosh-tekuri/jsonschema/v6",
      "version": "v6.0.2",
      "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0?package-id=f3ec74210406d50b",
      "type": "library",
      "name": "github.com/sassoftware/go-rpmutils",
      "version": "v0.4.0",
      "cpe": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ojND82NYBxgwrV+mX1CWsd5QJvvEZTKddtCdFLPWhpg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0?package-id=bbdeb9fe25a39b31",
      "type": "library",
      "name": "github.com/sassoftware/go-rpmutils",
      "version": "v0.4.0",
      "cpe": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ojND82NYBxgwrV+mX1CWsd5QJvvEZTKddtCdFLPWhpg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=d2fc630ec49ea5b0",
      "type": "library",
      "name": "github.com/sassoftware/relic",
      "version": "v7.2.1+incompatible",
      "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=6d221468ff3bebb9",
      "type": "library",
      "name": "github.com/sassoftware/relic",
      "version": "v7.2.1+incompatible",
      "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1?package-id=16a7cd41393dbab7",
      "type": "library",
      "name": "github.com/secure-systems-lab/go-securesystemslib",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nZZaNz4DiERIQguNy0cL5qTdn9lR8XKHf4RUyG1Sx3g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1?package-id=bb5f6cb6741990cb",
      "type": "library",
      "name": "github.com/secure-systems-lab/go-securesystemslib",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go-securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go_securesystemslib:v0.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nZZaNz4DiERIQguNy0cL5qTdn9lR8XKHf4RUyG1Sx3g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=8235eae49b03bb1e",
      "type": "library",
      "name": "github.com/sergi/go-diff",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=f2d809b3f5e8fb3f",
      "type": "library",
      "name": "github.com/sergi/go-diff",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=5f18dea9c052e367",
      "type": "library",
      "name": "github.com/shibumi/go-pathspec",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=a58fa78983316737",
      "type": "library",
      "name": "github.com/shibumi/go-pathspec",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=69490be2e74834f5",
      "type": "library",
      "name": "github.com/shopspring/decimal",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=aa4d6d97eb73bf1a",
      "type": "library",
      "name": "github.com/shopspring/decimal",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4?package-id=9cf3c14d196e454e",
      "type": "library",
      "name": "github.com/sigstore/cosign/v2",
      "version": "v2.2.4",
      "cpe": "cpe:2.3:a:sigstore:cosign\\/v2:v2.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iY4vtEacmu2hkNj1Fh+8EBqBwKs2DHM27/lbNWDFJro="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4?package-id=d867b4637365045c",
      "type": "library",
      "name": "github.com/sigstore/cosign/v2",
      "version": "v2.2.4",
      "cpe": "cpe:2.3:a:sigstore:cosign\\/v2:v2.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iY4vtEacmu2hkNj1Fh+8EBqBwKs2DHM27/lbNWDFJro="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0?package-id=d29ea4d9508e35d4",
      "type": "library",
      "name": "github.com/sigstore/protobuf-specs",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:F8YTI65xOHw70NrvPwJ5PhAzsvTnuJMGLkA4FIkofAY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0?package-id=8bbe43df0750d88f",
      "type": "library",
      "name": "github.com/sigstore/protobuf-specs",
      "version": "v0.5.0",
      "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:F8YTI65xOHw70NrvPwJ5PhAzsvTnuJMGLkA4FIkofAY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.4.3?package-id=05970364d5d70ade",
      "type": "library",
      "name": "github.com/sigstore/rekor",
      "version": "v1.4.3",
      "cpe": "cpe:2.3:a:sigstore:rekor:v1.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/rekor@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2+aw4Gbgumv8vYM/QVg6b+hvr4x4Cukur8stJrVPKU0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.4.3?package-id=30dc94cbe3e64958",
      "type": "library",
      "name": "github.com/sigstore/rekor",
      "version": "v1.4.3",
      "cpe": "cpe:2.3:a:sigstore:rekor:v1.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/rekor@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2+aw4Gbgumv8vYM/QVg6b+hvr4x4Cukur8stJrVPKU0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.9.5?package-id=77a17ee9bd28b5c9",
      "type": "library",
      "name": "github.com/sigstore/sigstore",
      "version": "v1.9.5",
      "cpe": "cpe:2.3:a:sigstore:sigstore:v1.9.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore@v1.9.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wm1LT9yF4LhQdEMy5A2JeGRHTrAWGjT3ubE5JUSrGVU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.9.5?package-id=22a660030be4f52d",
      "type": "library",
      "name": "github.com/sigstore/sigstore",
      "version": "v1.9.5",
      "cpe": "cpe:2.3:a:sigstore:sigstore:v1.9.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore@v1.9.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Wm1LT9yF4LhQdEMy5A2JeGRHTrAWGjT3ubE5JUSrGVU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2?package-id=b4f3953abe942fde",
      "type": "library",
      "name": "github.com/sigstore/timestamp-authority",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:sigstore:timestamp-authority:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:timestamp_authority:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X4qyutnCQqJ0apMewFyx+3t7Tws00JQ/JonBiu3QvLE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2?package-id=5b47a7eced56be88",
      "type": "library",
      "name": "github.com/sigstore/timestamp-authority",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:sigstore:timestamp-authority:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:timestamp_authority:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X4qyutnCQqJ0apMewFyx+3t7Tws00JQ/JonBiu3QvLE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af?package-id=e88d3af9613246fb",
      "type": "library",
      "name": "github.com/sirupsen/logrus",
      "version": "v1.9.4-0.20230606125235-dd1b4c2e81af",
      "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4-0.20230606125235-dd1b4c2e81af:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sp5TG9f7K39yfB+If0vjp97vuT74F72r8hfRpP8jLU0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af?package-id=8748f8640dce549c",
      "type": "library",
      "name": "github.com/sirupsen/logrus",
      "version": "v1.9.4-0.20230606125235-dd1b4c2e81af",
      "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4-0.20230606125235-dd1b4c2e81af:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Sp5TG9f7K39yfB+If0vjp97vuT74F72r8hfRpP8jLU0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/skeema/knownhosts@v1.3.1?package-id=65b15212473f4303",
      "type": "library",
      "name": "github.com/skeema/knownhosts",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X2osQ+RAjK76shCbvhHHHVl3ZlgDm8apHEHFqRjnBY8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/skeema/knownhosts@v1.3.1?package-id=9302257658670afc",
      "type": "library",
      "name": "github.com/skeema/knownhosts",
      "version": "v1.3.1",
      "cpe": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X2osQ+RAjK76shCbvhHHHVl3ZlgDm8apHEHFqRjnBY8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=adb794ada86afe45",
      "type": "library",
      "name": "github.com/sourcegraph/conc",
      "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
      "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=4af71e564836518c",
      "type": "library",
      "name": "github.com/sourcegraph/conc",
      "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
      "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spdx/tools-golang@v0.5.5?package-id=b48e53a893656184",
      "type": "library",
      "name": "github.com/spdx/tools-golang",
      "version": "v0.5.5",
      "cpe": "cpe:2.3:a:spdx:tools-golang:v0.5.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spdx/tools-golang@v0.5.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:tools_golang:v0.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:61c0KLfAcNqAjlg6UNMdkwpMernhw3zVRwDZ2x9XOmk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spdx/tools-golang@v0.5.5?package-id=6761738d37116d3e",
      "type": "library",
      "name": "github.com/spdx/tools-golang",
      "version": "v0.5.5",
      "cpe": "cpe:2.3:a:spdx:tools-golang:v0.5.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spdx/tools-golang@v0.5.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:tools_golang:v0.5.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:61c0KLfAcNqAjlg6UNMdkwpMernhw3zVRwDZ2x9XOmk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=940e1963ed606b13",
      "type": "library",
      "name": "github.com/spf13/afero",
      "version": "v1.15.0",
      "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=cac76a8283eb73f8",
      "type": "library",
      "name": "github.com/spf13/afero",
      "version": "v1.15.0",
      "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=54f84d8fb23d0fc2",
      "type": "library",
      "name": "github.com/spf13/cast",
      "version": "v1.10.0",
      "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=309b745c58d0ed91",
      "type": "library",
      "name": "github.com/spf13/cast",
      "version": "v1.10.0",
      "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.1?package-id=9f73fab7372e1f3c",
      "type": "library",
      "name": "github.com/spf13/cobra",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:spf13:cobra:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cobra@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lJeBwCfmrnXthfAupyUTzJ/J4Nc1RsHC/mSRU2dll/s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.1?package-id=925de16474cba068",
      "type": "library",
      "name": "github.com/spf13/cobra",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:spf13:cobra:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cobra@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lJeBwCfmrnXthfAupyUTzJ/J4Nc1RsHC/mSRU2dll/s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=21f63e6799441fd1",
      "type": "library",
      "name": "github.com/spf13/pflag",
      "version": "v1.0.10",
      "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=06ed44e231081468",
      "type": "library",
      "name": "github.com/spf13/pflag",
      "version": "v1.0.10",
      "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=a96122d2eddb28c6",
      "type": "library",
      "name": "github.com/spf13/viper",
      "version": "v1.21.0",
      "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=a5f1475ebf842c33",
      "type": "library",
      "name": "github.com/spf13/viper",
      "version": "v1.21.0",
      "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0?package-id=c960131e031b517d",
      "type": "library",
      "name": "github.com/spiffe/go-spiffe/v2",
      "version": "v2.5.0",
      "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:N2I01KCUkv1FAjZXJMwh95KK1ZIQLYbPfhaxw8WS0hE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0?package-id=6633cc2b86830f19",
      "type": "library",
      "name": "github.com/spiffe/go-spiffe/v2",
      "version": "v2.5.0",
      "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:N2I01KCUkv1FAjZXJMwh95KK1ZIQLYbPfhaxw8WS0hE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/objx@v0.5.2?package-id=82c876d3d02aae48",
      "type": "library",
      "name": "github.com/stretchr/objx",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:stretchr:objx:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/stretchr/objx@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/objx@v0.5.2?package-id=411a9f05b5b4d4b1",
      "type": "library",
      "name": "github.com/stretchr/objx",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:stretchr:objx:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/stretchr/objx@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.11.1?package-id=7b80fe08af2f25a0",
      "type": "library",
      "name": "github.com/stretchr/testify",
      "version": "v1.11.1",
      "cpe": "cpe:2.3:a:stretchr:testify:v1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.11.1?package-id=6654e7a92f92e525",
      "type": "library",
      "name": "github.com/stretchr/testify",
      "version": "v1.11.1",
      "cpe": "cpe:2.3:a:stretchr:testify:v1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=a30a1a265837e7ff",
      "type": "library",
      "name": "github.com/subosito/gotenv",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=b8bb0bc6e2053d5d",
      "type": "library",
      "name": "github.com/subosito/gotenv",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=b9e0ad7843d55e03",
      "type": "library",
      "name": "github.com/syndtr/goleveldb",
      "version": "v1.0.1-0.20220721030215-126854af5e6d",
      "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=b6a1d4c851186569",
      "type": "library",
      "name": "github.com/syndtr/goleveldb",
      "version": "v1.0.1-0.20220721030215-126854af5e6d",
      "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=eada086ea14074fd",
      "type": "library",
      "name": "github.com/tchap/go-patricia/v2",
      "version": "v2.3.3",
      "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=398f50e3b6eaa1cd",
      "type": "library",
      "name": "github.com/tchap/go-patricia/v2",
      "version": "v2.3.3",
      "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tetratelabs/wazero@v1.10.1?package-id=0ce3ac9cf990a82f",
      "type": "library",
      "name": "github.com/tetratelabs/wazero",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:tetratelabs:wazero:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2DugeJf6VVk58KTPszlNfeeN8AhhpwcZqkJj2wwFuH8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tetratelabs/wazero@v1.10.1?package-id=1190c152aa48cc22",
      "type": "library",
      "name": "github.com/tetratelabs/wazero",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:tetratelabs:wazero:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2DugeJf6VVk58KTPszlNfeeN8AhhpwcZqkJj2wwFuH8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=253e737ac9286ba9",
      "type": "library",
      "name": "github.com/theupdateframework/go-tuf",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=ed7c4593333acf34",
      "type": "library",
      "name": "github.com/theupdateframework/go-tuf",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=4ba5c444c387b93d",
      "type": "library",
      "name": "github.com/titanous/rocacheck",
      "version": "v0.0.0-20171023193734-afe73141d399",
      "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=2fdeffef0c60f2df",
      "type": "library",
      "name": "github.com/titanous/rocacheck",
      "version": "v0.0.0-20171023193734-afe73141d399",
      "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=6372e9e031de4dba",
      "type": "library",
      "name": "github.com/tonistiigi/go-csvvalue",
      "version": "v0.0.0-20240814133006-030d3b2625d0",
      "cpe": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2f304B10LaZdB8kkVEaoXvAMVan2tl9AiK4G0odjQtE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=8668a1d990e3d5fe",
      "type": "library",
      "name": "github.com/tonistiigi/go-csvvalue",
      "version": "v0.0.0-20240814133006-030d3b2625d0",
      "cpe": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2f304B10LaZdB8kkVEaoXvAMVan2tl9AiK4G0odjQtE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0?package-id=599fb6c9e3ffdffc",
      "type": "library",
      "name": "github.com/toqueteos/webbrowser",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:toqueteos:webbrowser:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tVP/gpK69Fx+qMJKsLE7TD8LuGWPnEV71wBN9rrstGQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0?package-id=28d6daae8144a78f",
      "type": "library",
      "name": "github.com/toqueteos/webbrowser",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:toqueteos:webbrowser:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tVP/gpK69Fx+qMJKsLE7TD8LuGWPnEV71wBN9rrstGQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=dfc92409aedc77be",
      "type": "library",
      "name": "github.com/transparency-dev/merkle",
      "version": "v0.0.2",
      "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=ee4b18326f00cc6b",
      "type": "library",
      "name": "github.com/transparency-dev/merkle",
      "version": "v0.0.2",
      "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible?package-id=bb31c6447a5dec71",
      "type": "library",
      "name": "github.com/twitchtv/twirp",
      "version": "v8.1.3+incompatible",
      "cpe": "cpe:2.3:a:twitchtv:twirp:v8.1.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+F4TdErPgSUbMZMwp13Q/KgDVuI7HJXP61mNV3/7iuU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible?package-id=807cf8df68328c84",
      "type": "library",
      "name": "github.com/twitchtv/twirp",
      "version": "v8.1.3+incompatible",
      "cpe": "cpe:2.3:a:twitchtv:twirp:v8.1.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+F4TdErPgSUbMZMwp13Q/KgDVuI7HJXP61mNV3/7iuU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=31864cecca14dce2",
      "type": "library",
      "name": "github.com/ulikunitz/xz",
      "version": "v0.5.15",
      "cpe": "cpe:2.3:a:ulikunitz:xz:v0.5.15:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=f8bee5562c71fd5b",
      "type": "library",
      "name": "github.com/ulikunitz/xz",
      "version": "v0.5.15",
      "cpe": "cpe:2.3:a:ulikunitz:xz:v0.5.15:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.4?package-id=9ecdd191dd955d1c",
      "type": "library",
      "name": "github.com/valyala/fastjson",
      "version": "v1.6.4",
      "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uAUNq9Z6ymTgGhcm0UynUAB6tlbakBrz6CQFax3BXVQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.4?package-id=2dbc51041b4c30a8",
      "type": "library",
      "name": "github.com/valyala/fastjson",
      "version": "v1.6.4",
      "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uAUNq9Z6ymTgGhcm0UynUAB6tlbakBrz6CQFax3BXVQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.12.2?package-id=c34f8675f5773719",
      "type": "library",
      "name": "github.com/vbatts/tar-split",
      "version": "v0.12.2",
      "cpe": "cpe:2.3:a:vbatts:tar-split:v0.12.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vbatts/tar-split@v0.12.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vbatts:tar_split:v0.12.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:w/Y6tjxpeiFMR47yzZPlPj/FcPLpXbTUi/9H7d3CPa4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.12.2?package-id=9a83f2d2dcd62db5",
      "type": "library",
      "name": "github.com/vbatts/tar-split",
      "version": "v0.12.2",
      "cpe": "cpe:2.3:a:vbatts:tar-split:v0.12.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vbatts/tar-split@v0.12.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vbatts:tar_split:v0.12.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:w/Y6tjxpeiFMR47yzZPlPj/FcPLpXbTUi/9H7d3CPa4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30?package-id=0778fca9a5c31579",
      "type": "library",
      "name": "github.com/vektah/gqlparser/v2",
      "version": "v2.5.30",
      "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.30:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EqLwGAFLIzt1wpx1IPpY67DwUujF1OfzgEyDsLrN6kE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30?package-id=5f977fd0593602af",
      "type": "library",
      "name": "github.com/vektah/gqlparser/v2",
      "version": "v2.5.30",
      "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.30:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EqLwGAFLIzt1wpx1IPpY67DwUujF1OfzgEyDsLrN6kE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1?package-id=11c9abe440d1cdcb",
      "type": "library",
      "name": "github.com/vmihailenco/msgpack/v5",
      "version": "v5.4.1",
      "cpe": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cQriyiUvjTwOHg8QZaPihLWeRAAVoCpE00IUPn0Bjt8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1?package-id=d94203b573d714f7",
      "type": "library",
      "name": "github.com/vmihailenco/msgpack/v5",
      "version": "v5.4.1",
      "cpe": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cQriyiUvjTwOHg8QZaPihLWeRAAVoCpE00IUPn0Bjt8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0?package-id=9785247496b8d51b",
      "type": "library",
      "name": "github.com/vmihailenco/tagparser/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y09buUbR+b5aycVFQs/g70pqKVZNBmxwAhO7/IwNM9g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0?package-id=5eac30b073dec4a9",
      "type": "library",
      "name": "github.com/vmihailenco/tagparser/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y09buUbR+b5aycVFQs/g70pqKVZNBmxwAhO7/IwNM9g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=9a962a2a919e4f8f",
      "type": "library",
      "name": "github.com/x448/float16",
      "version": "v0.8.4",
      "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=d8ecfa6a5be7f0e9",
      "type": "library",
      "name": "github.com/x448/float16",
      "version": "v0.8.4",
      "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=499698c0b37cbd27",
      "type": "library",
      "name": "github.com/xanzy/ssh-agent",
      "version": "v0.3.3",
      "cpe": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=0f40c79f67c5170d",
      "type": "library",
      "name": "github.com/xanzy/ssh-agent",
      "version": "v0.3.3",
      "cpe": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=d630560aec33f77d",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonpointer",
      "version": "v0.0.0-20190905194746-02993c407bfb",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=2faa75ec3badabf9",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonpointer",
      "version": "v0.0.0-20190905194746-02993c407bfb",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=df22ffa2bae0a7e2",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonreference",
      "version": "v0.0.0-20180127040603-bd5ef7bd5415",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=64ad779ca6e76068",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonreference",
      "version": "v0.0.0-20180127040603-bd5ef7bd5415",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=2ba21a7458fbaa34",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonschema",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=620f00e6fe4daa07",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonschema",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8?package-id=3e98e11239e8e27b",
      "type": "library",
      "name": "github.com/xi2/xz",
      "version": "v0.0.0-20171230120015-48954b6210f8",
      "cpe": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8?package-id=0dc3fae860cc8b58",
      "type": "library",
      "name": "github.com/xi2/xz",
      "version": "v0.0.0-20171230120015-48954b6210f8",
      "cpe": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xlab/treeprint@v1.2.0?package-id=2f08fc63741ce400",
      "type": "library",
      "name": "github.com/xlab/treeprint",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:xlab:treeprint:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xlab/treeprint@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xlab/treeprint@v1.2.0?package-id=d83b0de000d75acb",
      "type": "library",
      "name": "github.com/xlab/treeprint",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:xlab:treeprint:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xlab/treeprint@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=a08cb62a547599fb",
      "type": "library",
      "name": "github.com/yashtewari/glob-intersection",
      "version": "v0.2.0",
      "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=3bbabe73367649a5",
      "type": "library",
      "name": "github.com/yashtewari/glob-intersection",
      "version": "v0.2.0",
      "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zclconf/go-cty@v1.17.0?package-id=7ebc424a6c7eecac",
      "type": "library",
      "name": "github.com/zclconf/go-cty",
      "version": "v1.17.0",
      "cpe": "cpe:2.3:a:zclconf:go-cty:v1.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zclconf/go-cty@v1.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zclconf:go_cty:v1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:seZvECve6XX4tmnvRzWtJNHdscMtYEx5R7bnnVyd/d0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zclconf/go-cty@v1.17.0?package-id=0b63a51a895785ef",
      "type": "library",
      "name": "github.com/zclconf/go-cty",
      "version": "v1.17.0",
      "cpe": "cpe:2.3:a:zclconf:go-cty:v1.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zclconf/go-cty@v1.17.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zclconf:go_cty:v1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:seZvECve6XX4tmnvRzWtJNHdscMtYEx5R7bnnVyd/d0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0?package-id=b0036e65a18b624d",
      "type": "library",
      "name": "github.com/zclconf/go-cty-yaml",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nP+jp0qPHv2IhUVqmQSzjvqAWcObN0KBkUl2rWBdig0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0?package-id=e475a67a8b271542",
      "type": "library",
      "name": "github.com/zclconf/go-cty-yaml",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nP+jp0qPHv2IhUVqmQSzjvqAWcObN0KBkUl2rWBdig0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zeebo/errs@v1.4.0?package-id=e43f35d405cfd8af",
      "type": "library",
      "name": "github.com/zeebo/errs",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:zeebo:errs:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zeebo/errs@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XNdoD/RRMKP7HD0UhJnIzUy74ISdGGxURlYG8HSWSfM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/zeebo/errs@v1.4.0?package-id=95a81b56b9b524b2",
      "type": "library",
      "name": "github.com/zeebo/errs",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:zeebo:errs:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/zeebo/errs@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XNdoD/RRMKP7HD0UhJnIzUy74ISdGGxURlYG8HSWSfM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/glob@10.4.5?package-id=8a53e328dfadc56f",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
      "name": "glob",
      "version": "10.4.5",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:10.4.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@10.4.5",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/glob@10.5.0?package-id=2fc248216d63b2da",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
      "name": "glob",
      "version": "10.5.0",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/glob@10.5.0/node_modules/glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/glob@10.5.0?package-id=fbb9033f8e9cbb3f",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
      "name": "glob",
      "version": "10.5.0",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/glob@13.0.6?package-id=3a923bade7021284",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
      "name": "glob",
      "version": "13.0.6",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:13.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@13.0.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/glob@13.0.6/node_modules/glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/glob@7.2.3?package-id=506e53f9f394f1d9",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "glob",
      "version": "7.2.3",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/glob@7.2.3/node_modules/glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/globals@15.15.0?package-id=56483d1841552d26",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "globals",
      "version": "15.15.0",
      "description": "Global identifiers from different JavaScript environments",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:globals:globals:15.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/globals@15.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/globals@15.15.0/node_modules/globals/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.etcd.io/bbolt@v1.4.3?package-id=62a54c1b03b48a45",
      "type": "library",
      "name": "go.etcd.io/bbolt",
      "version": "v1.4.3",
      "purl": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dEadXpI6G79deX5prL3QRNP6JB8UxVkqo4UPnHaNXJo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.etcd.io/bbolt@v1.4.3?package-id=06a19f2615fb18b6",
      "type": "library",
      "name": "go.etcd.io/bbolt",
      "version": "v1.4.3",
      "purl": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dEadXpI6G79deX5prL3QRNP6JB8UxVkqo4UPnHaNXJo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6?package-id=e6a2059977c53ed3",
      "type": "library",
      "name": "go.mongodb.org/mongo-driver",
      "version": "v1.17.6",
      "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:87JUG1wZfWsr6rIz3ZmpH90rL5tea7O3IHuSwHUpsss="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6?package-id=126dc8699c66ff0b",
      "type": "library",
      "name": "go.mongodb.org/mongo-driver",
      "version": "v1.17.6",
      "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:87JUG1wZfWsr6rIz3ZmpH90rL5tea7O3IHuSwHUpsss="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=94746a0443a17830",
      "type": "library",
      "name": "go.opentelemetry.io/auto/sdk",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=3dfcabd308411e03",
      "type": "library",
      "name": "go.opentelemetry.io/auto/sdk",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0?package-id=8a86a6635f67ae89",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/detectors/gcp",
      "version": "v1.36.0",
      "cpe": "cpe:2.3:a:contrib:detectors\\/gcp:v1.36.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:F7q2tNlCaHY9nMKHR6XH9/qkp8FktLnIcy6jJNyOCQw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0?package-id=68fbd03ac0d2fb9b",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/detectors/gcp",
      "version": "v1.36.0",
      "cpe": "cpe:2.3:a:contrib:detectors\\/gcp:v1.36.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:F7q2tNlCaHY9nMKHR6XH9/qkp8FktLnIcy6jJNyOCQw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0?package-id=0b764b4531745a0d",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
      "version": "v0.61.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.61.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0?package-id=a5299d2d1c4ae75e",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
      "version": "v0.61.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.61.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0?package-id=39c3361f796a364a",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
      "version": "v0.63.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.63.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0?package-id=15f686cb4b53bbfe",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
      "version": "v0.63.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.63.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.38.0?package-id=cbc5e3040dd1a3fa",
      "type": "library",
      "name": "go.opentelemetry.io/otel",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.38.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.38.0?package-id=012f43ed551a050b",
      "type": "library",
      "name": "go.opentelemetry.io/otel",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.38.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0?package-id=9492efa993a23060",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vl9obrcoWVKp/lwl8tRE33853I8Xru9HFbw/skNeLs8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0?package-id=417291b28df46cee",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vl9obrcoWVKp/lwl8tRE33853I8Xru9HFbw/skNeLs8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0?package-id=fab7fbb232566e71",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0?package-id=4f125edcae3e76a4",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0?package-id=647b89a525bcf842",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lwI4Dc5leUqENgGuQImwLo4WnuXFPetmPpkLi2IrX54="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0?package-id=3bd6649b21fef965",
      "type": "library",
      "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lwI4Dc5leUqENgGuQImwLo4WnuXFPetmPpkLi2IrX54="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0?package-id=06eedaeb72da0975",
      "type": "library",
      "name": "go.opentelemetry.io/otel/metric",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:metric:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0?package-id=5aaf9b02bc1abcc8",
      "type": "library",
      "name": "go.opentelemetry.io/otel/metric",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:metric:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0?package-id=bdc4faf26afaaddc",
      "type": "library",
      "name": "go.opentelemetry.io/otel/sdk",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:sdk:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0?package-id=1496ca861a41025c",
      "type": "library",
      "name": "go.opentelemetry.io/otel/sdk",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:sdk:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0?package-id=7e970706cbc510f7",
      "type": "library",
      "name": "go.opentelemetry.io/otel/sdk/metric",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:sdk\\/metric:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0?package-id=3357a50df11f5190",
      "type": "library",
      "name": "go.opentelemetry.io/otel/sdk/metric",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:sdk\\/metric:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0?package-id=bbc81df4fe56de03",
      "type": "library",
      "name": "go.opentelemetry.io/otel/trace",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:trace:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0?package-id=83f6bd5f249ff88f",
      "type": "library",
      "name": "go.opentelemetry.io/otel/trace",
      "version": "v1.38.0",
      "cpe": "cpe:2.3:a:otel:trace:v1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1?package-id=bc302506b5508607",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.7.1",
      "cpe": "cpe:2.3:a:proto:otlp:v1.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1?package-id=8ee10da2dfb36ed8",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.7.1",
      "cpe": "cpe:2.3:a:proto:otlp:v1.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=90719e6e2eadfa3e",
      "type": "library",
      "name": "go.uber.org/multierr",
      "version": "v1.11.0",
      "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=97ca470b5500fb0c",
      "type": "library",
      "name": "go.uber.org/multierr",
      "version": "v1.11.0",
      "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/zap@v1.27.0?package-id=9009ad5e0088a77e",
      "type": "library",
      "name": "go.uber.org/zap",
      "version": "v1.27.0",
      "purl": "pkg:golang/go.uber.org/zap@v1.27.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/zap@v1.27.0?package-id=e2378efd29a380f9",
      "type": "library",
      "name": "go.uber.org/zap",
      "version": "v1.27.0",
      "purl": "pkg:golang/go.uber.org/zap@v1.27.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.2?package-id=ea737e1950f57aa4",
      "type": "library",
      "name": "go.yaml.in/yaml/v2",
      "version": "v2.4.2",
      "cpe": "cpe:2.3:a:yaml:v2:v2.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.2?package-id=8ad13e03e23ad6cb",
      "type": "library",
      "name": "go.yaml.in/yaml/v2",
      "version": "v2.4.2",
      "cpe": "cpe:2.3:a:yaml:v2:v2.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=bf3d92bf42c13423",
      "type": "library",
      "name": "go.yaml.in/yaml/v3",
      "version": "v3.0.4",
      "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=762ac741b0426add",
      "type": "library",
      "name": "go.yaml.in/yaml/v3",
      "version": "v3.0.4",
      "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.39.0?package-id=e68ae952a5abfaf8",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.39.0",
      "cpe": "cpe:2.3:a:golang:crypto:v0.39.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/crypto@v0.39.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ssh:v0.39.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trustinspector/trustinspector-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.39.0?package-id=7487b2dfcd4d453e",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.39.0",
      "cpe": "cpe:2.3:a:golang:crypto:v0.39.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/crypto@v0.39.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ssh:v0.39.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trustinspector/trustinspector-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.45.0?package-id=44f8efaea5efca19",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.45.0",
      "cpe": "cpe:2.3:a:golang:crypto:v0.45.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/crypto@v0.45.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ssh:v0.45.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.45.0?package-id=9a1e58ef6a0392ba",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.45.0",
      "cpe": "cpe:2.3:a:golang:crypto:v0.45.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/crypto@v0.45.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ssh:v0.45.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546?package-id=7915ef14d8ed0d6e",
      "type": "library",
      "name": "golang.org/x/exp",
      "version": "v0.0.0-20251023183803-a4bb9ffd2546",
      "cpe": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20251023183803-a4bb9ffd2546:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mgKeJMpvi0yx/sU5GsxQ7p6s2wtOnGAHZWCHUM4KGzY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546?package-id=65cad8ee58a28966",
      "type": "library",
      "name": "golang.org/x/exp",
      "version": "v0.0.0-20251023183803-a4bb9ffd2546",
      "cpe": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20251023183803-a4bb9ffd2546:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mgKeJMpvi0yx/sU5GsxQ7p6s2wtOnGAHZWCHUM4KGzY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.30.0?package-id=d41717a8153bdd2a",
      "type": "library",
      "name": "golang.org/x/mod",
      "version": "v0.30.0",
      "cpe": "cpe:2.3:a:golang:x\\/mod:v0.30.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/mod@v0.30.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/golem/golem-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.30.0?package-id=b78b989a1c4c0337",
      "type": "library",
      "name": "golang.org/x/mod",
      "version": "v0.30.0",
      "cpe": "cpe:2.3:a:golang:x\\/mod:v0.30.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/mod@v0.30.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.30.0?package-id=cdcc0647524ed355",
      "type": "library",
      "name": "golang.org/x/mod",
      "version": "v0.30.0",
      "cpe": "cpe:2.3:a:golang:x\\/mod:v0.30.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/mod@v0.30.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/golem/golem-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.30.0?package-id=f46c7c7816ae8e56",
      "type": "library",
      "name": "golang.org/x/mod",
      "version": "v0.30.0",
      "cpe": "cpe:2.3:a:golang:x\\/mod:v0.30.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/mod@v0.30.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.47.0?package-id=f018490ae2238b0f",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.47.0",
      "cpe": "cpe:2.3:a:golang:networking:v0.47.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/net@v0.47.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:net:v0.47.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.47.0?package-id=536772ae8c7ca2a4",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.47.0",
      "cpe": "cpe:2.3:a:golang:networking:v0.47.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/net@v0.47.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:net:v0.47.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.55.0?package-id=09443de55468353e",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.55.0",
      "cpe": "cpe:2.3:a:golang:networking:v0.55.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/net@v0.55.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:net:v0.55.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/bin/safer-exec-rt"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.26.4"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/safer-exec/go"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.32.0?package-id=14cac98322c28781",
      "type": "library",
      "name": "golang.org/x/oauth2",
      "version": "v0.32.0",
      "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.32.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/oauth2@v0.32.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.32.0?package-id=e637d7e77b12a348",
      "type": "library",
      "name": "golang.org/x/oauth2",
      "version": "v0.32.0",
      "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.32.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/oauth2@v0.32.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.18.0?package-id=542606649fe64512",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.18.0",
      "cpe": "cpe:2.3:a:golang:x\\/sync:v0.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sync@v0.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/golem/golem-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.18.0?package-id=0e2fd0b1b95e5e54",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.18.0",
      "cpe": "cpe:2.3:a:golang:x\\/sync:v0.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sync@v0.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.18.0?package-id=af09cf05d26a5987",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.18.0",
      "cpe": "cpe:2.3:a:golang:x\\/sync:v0.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sync@v0.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/golem/golem-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.18.0?package-id=2a3dc3c0b890ebb6",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.18.0",
      "cpe": "cpe:2.3:a:golang:x\\/sync:v0.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sync@v0.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8?package-id=d1dcf4ac3f470c06",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.0.0-20220715151400-c0bba94af5f8",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220715151400-c0bba94af5f8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.21.5/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.20.12"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/evanw/esbuild"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8?package-id=0bd3d4ebfab22291",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.0.0-20220715151400-c0bba94af5f8",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220715151400-c0bba94af5f8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.25.10/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.23.12"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/evanw/esbuild"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.38.0?package-id=9fc013721b67f789",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.38.0",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.38.0?package-id=26741d8694b28e77",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.38.0",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.45.0?package-id=a4ef549d38aab6e9",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.45.0",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.45.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.45.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/bin/safer-exec-rt"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.26.4"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/safer-exec/go"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/term@v0.37.0?package-id=50f9066af7db4f62",
      "type": "library",
      "name": "golang.org/x/term",
      "version": "v0.37.0",
      "cpe": "cpe:2.3:a:golang:x\\/term:v0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/term@v0.37.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/term@v0.37.0?package-id=164c5b15cc6715d1",
      "type": "library",
      "name": "golang.org/x/term",
      "version": "v0.37.0",
      "cpe": "cpe:2.3:a:golang:x\\/term:v0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/term@v0.37.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.31.0?package-id=1bbe2fa0d659d8bb",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.31.0",
      "cpe": "cpe:2.3:a:golang:text:v0.31.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/text@v0.31.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.31.0?package-id=6dc691b2a3ce225d",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.31.0",
      "cpe": "cpe:2.3:a:golang:text:v0.31.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/text@v0.31.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/time@v0.14.0?package-id=ec80cd9e47e59771",
      "type": "library",
      "name": "golang.org/x/time",
      "version": "v0.14.0",
      "cpe": "cpe:2.3:a:golang:x\\/time:v0.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/time@v0.14.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/time@v0.14.0?package-id=1d7244f533088bad",
      "type": "library",
      "name": "golang.org/x/time",
      "version": "v0.14.0",
      "cpe": "cpe:2.3:a:golang:x\\/time:v0.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/time@v0.14.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/tools@v0.39.0?package-id=f7f02cee570ce81a",
      "type": "library",
      "name": "golang.org/x/tools",
      "version": "v0.39.0",
      "cpe": "cpe:2.3:a:golang:x\\/tools:v0.39.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/tools@v0.39.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/golem/golem-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/tools@v0.39.0?package-id=7134e8081df82d5b",
      "type": "library",
      "name": "golang.org/x/tools",
      "version": "v0.39.0",
      "cpe": "cpe:2.3:a:golang:x\\/tools:v0.39.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/tools@v0.39.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/golem/golem-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9?package-id=4253d98d379d31e5",
      "type": "library",
      "name": "golang.org/x/xerrors",
      "version": "v0.0.0-20240716161551-93cc26a95ae9",
      "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240716161551-93cc26a95ae9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LLhsEBxRTBLuKlQxFBYUOU8xyFgXv6cOTp2HASDlsDk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9?package-id=42c759b6fd078217",
      "type": "library",
      "name": "golang.org/x/xerrors",
      "version": "v0.0.0-20240716161551-93cc26a95ae9",
      "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240716161551-93cc26a95ae9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LLhsEBxRTBLuKlQxFBYUOU8xyFgXv6cOTp2HASDlsDk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/api@v0.254.0?package-id=c6d6e742df58db2c",
      "type": "library",
      "name": "google.golang.org/api",
      "version": "v0.254.0",
      "cpe": "cpe:2.3:a:google:api:v0.254.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/api@v0.254.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jl3XrGj7lRjnlUvZAbAdhINTLbsg5dbjmR90+pTQvt4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/api@v0.254.0?package-id=39fd7a8a2727fab9",
      "type": "library",
      "name": "google.golang.org/api",
      "version": "v0.254.0",
      "cpe": "cpe:2.3:a:google:api:v0.254.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/api@v0.254.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jl3XrGj7lRjnlUvZAbAdhINTLbsg5dbjmR90+pTQvt4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822?package-id=f5044d19e17a42a0",
      "type": "library",
      "name": "google.golang.org/genproto",
      "version": "v0.0.0-20250603155806-513f23925822",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20250603155806-513f23925822:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rHWScKit0gvAPuOnu87KpaYtjK5zBMLcULh7gxkCXu4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822?package-id=d18410316de6c7ae",
      "type": "library",
      "name": "google.golang.org/genproto",
      "version": "v0.0.0-20250603155806-513f23925822",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20250603155806-513f23925822:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rHWScKit0gvAPuOnu87KpaYtjK5zBMLcULh7gxkCXu4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5?package-id=e21615e10a920b58",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20250825161204-c5933d9347a5",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20250825161204-c5933d9347a5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BIRfGDEjiHRrk0QKZe3Xv2ieMhtgRGeLcZQ0mIVn4EY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5?package-id=8d1c36d225d0ad43",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20250825161204-c5933d9347a5",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20250825161204-c5933d9347a5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BIRfGDEjiHRrk0QKZe3Xv2ieMhtgRGeLcZQ0mIVn4EY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8?package-id=2eb1583c08331883",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20251022142026-3a174f9686a8",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20251022142026-3a174f9686a8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:M1rk8KBnUsBDg1oPGHNCxG4vc1f49epmTO7xscSajMk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8?package-id=04c09cfb42f5af85",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20251022142026-3a174f9686a8",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20251022142026-3a174f9686a8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:M1rk8KBnUsBDg1oPGHNCxG4vc1f49epmTO7xscSajMk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.76.0?package-id=de06752693d979e1",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.76.0",
      "cpe": "cpe:2.3:a:google:grpc:v1.76.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/grpc@v1.76.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UnVkv1+uMLYXoIz6o7chp59WfQUYA2ex/BXQ9rHZu7A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.76.0?package-id=4ed23868b1bd197b",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.76.0",
      "cpe": "cpe:2.3:a:google:grpc:v1.76.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/grpc@v1.76.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UnVkv1+uMLYXoIz6o7chp59WfQUYA2ex/BXQ9rHZu7A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.10?package-id=d0479cc450e9a9ce",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.10",
      "cpe": "cpe:2.3:a:google:protobuf:v1.36.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.10?package-id=9b76a2f558aa037f",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.10",
      "cpe": "cpe:2.3:a:google:protobuf:v1.36.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/gopd@1.2.0?package-id=114738b10eda6820",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "gopd",
      "version": "1.2.0",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ljharb:gopd:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/gopd.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/gopd#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/gopd@1.2.0/node_modules/gopd/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28?package-id=3fe99c355b2b9dac",
      "type": "library",
      "name": "gopkg.in/cheggaaa/pb.v1",
      "version": "v1.0.28",
      "purl": "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n1tBJnnK2r7g9OW2btFH91V92STTUevLXYFb8gy9EMk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28?package-id=bdbf7ce49c39ded4",
      "type": "library",
      "name": "gopkg.in/cheggaaa/pb.v1",
      "version": "v1.0.28",
      "purl": "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n1tBJnnK2r7g9OW2btFH91V92STTUevLXYFb8gy9EMk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0?package-id=52448f4bd515917e",
      "type": "library",
      "name": "gopkg.in/evanphx/json-patch.v4",
      "version": "v4.12.0",
      "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSPG+6V4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0?package-id=e4659842cf45248e",
      "type": "library",
      "name": "gopkg.in/evanphx/json-patch.v4",
      "version": "v4.12.0",
      "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSPG+6V4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=f2c246b83400c84c",
      "type": "library",
      "name": "gopkg.in/inf.v0",
      "version": "v0.9.1",
      "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=fee7225124845b33",
      "type": "library",
      "name": "gopkg.in/inf.v0",
      "version": "v0.9.1",
      "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=a76d96a514756130",
      "type": "library",
      "name": "gopkg.in/warnings.v0",
      "version": "v0.1.2",
      "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=a8bebb795e3e5edd",
      "type": "library",
      "name": "gopkg.in/warnings.v0",
      "version": "v0.1.2",
      "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=fe1ecc31d1c5a5c8",
      "type": "library",
      "name": "gopkg.in/yaml.v3",
      "version": "v3.0.1",
      "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=3ad0d3b88aea9a52",
      "type": "library",
      "name": "gopkg.in/yaml.v3",
      "version": "v3.0.1",
      "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=bab4532a87a829c8&upstream=gnupg2",
      "type": "library",
      "publisher": "Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>",
      "name": "gpgv",
      "version": "2.2.40-1.1+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "RFC-Reference"
          }
        },
        {
          "license": {
            "name": "TinySCHEME"
          }
        },
        {
          "license": {
            "name": "permissive"
          }
        }
      ],
      "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.40-1.1\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=gnupg2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/gpgv/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/gpgv.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/gpgv.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "918"
        },
        {
          "name": "syft:metadata:source",
          "value": "gnupg2"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=49f020d0a8e41def",
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-graceful-fs",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/graceful-fs@4.2.11/node_modules/graceful-fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=4026b806a7a8297c",
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-graceful-fs",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/graceful-fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=67161c93e791e030",
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-graceful-fs",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/grep@3.8-5?arch=amd64&distro=debian-12.15&package-id=22c460e1da8ba8cd",
      "type": "library",
      "publisher": "Anibal Monsalve Salazar <anibal@debian.org>",
      "name": "grep",
      "version": "3.8-5",
      "licenses": [
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:grep:grep:3.8-5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/grep@3.8-5?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/grep/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/grep.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/grep.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1245"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@33.6.0-jre?package-id=907ec41e72246b67",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.6.0-jre",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.google.guava:guava:33.6.0-jre:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.guava/guava@33.6.0-jre",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c376b13067cc99a5774403530953f7b05a91e218"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guava:33.6.0-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:33.6.0-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.guava-33.6.0-jre.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.guava-33.6.0-jre.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/gzip@1.12-1?arch=amd64&distro=debian-12.15&package-id=aa527ab8cb576b14",
      "type": "library",
      "publisher": "Milan Kupcevic <milan@debian.org>",
      "name": "gzip",
      "version": "1.12-1",
      "licenses": [
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "name": "FSF-manpages"
          }
        },
        {
          "license": {
            "name": "GFDL-1.3+-no-invariant"
          }
        },
        {
          "license": {
            "name": "GFDL-3"
          }
        }
      ],
      "cpe": "cpe:2.3:a:gzip:gzip:1.12-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/gzip@1.12-1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/gzip/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/gzip.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/gzip.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "252"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.h2database.mvstore/h2-mvstore@2.4.240?package-id=03658c43ceb884d7",
      "type": "library",
      "name": "h2-mvstore",
      "version": "2.4.240",
      "licenses": [
        {
          "license": {
            "name": "https://h2database.com/html/license.html"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.h2database.mvstore:h2-mvstore:2.4.240:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.h2database.mvstore/h2-mvstore@2.4.240",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "94df868127cf6da07a51a3286d20c78ca050e99f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.h2database.mvstore:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.h2database.mvstore:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2-mvstore:h2-mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2-mvstore:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2_mvstore:h2-mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2_mvstore:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2database:h2-mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2database:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2-mvstore:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2_mvstore:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2database:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mvstore:h2-mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mvstore:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mvstore:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2:h2-mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2:h2_mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:h2:mvstore:2.4.240:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.h2database.h2-mvstore-2.4.240.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.h2database.h2-mvstore-2.4.240.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hachure-fill@0.5.2?package-id=9535b321751bde32",
      "type": "library",
      "author": "Preet Shihn",
      "name": "hachure-fill",
      "version": "0.5.2",
      "description": "Fill a polygon with lines ",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hachure-fill:hachure-fill:0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hachure-fill@0.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/pshihn/hachure-fill.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pshihn/hachure-fill#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hachure-fill:hachure_fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hachure_fill:hachure-fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hachure_fill:hachure_fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hachure:hachure-fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hachure:hachure_fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:hachure-fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:hachure_fill:0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hachure-fill@0.5.2/node_modules/hachure-fill/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/has-symbols@1.1.0?package-id=cccaa0041a7d1909",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
      "name": "has-symbols",
      "version": "1.1.0",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/has-symbols.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/has-symbols#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:has-symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:has_symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:has-symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:has_symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/has-symbols@1.1.0/node_modules/has-symbols/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/has-tostringtag@1.0.2?package-id=6519f74a22364cbe",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-tostringtag.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/inspect-js/has-tostringtag#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/has-tostringtag@1.0.2/node_modules/has-tostringtag/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hasown@2.0.2?package-id=773bed39a6b7945a",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "hasown",
      "version": "2.0.2",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:inspect-js:hasown:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/hasOwn.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/inspect-js/hasOwn#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hasown:hasown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hasown@2.0.2/node_modules/hasown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-from-dom@5.0.1?package-id=9b054b44f466d78b",
      "type": "library",
      "author": "Keith McKnight <keith@mcknig.ht> (https://keith.mcknig.ht), Keith McKnight <keith@mcknig.ht> (https://keith.mcknig.ht), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-from-dom",
      "version": "5.0.1",
      "description": "hast utility to create a tree from the DOM",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-from-dom:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-from-dom@5.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-dom:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_dom:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_dom:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-from-dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_from_dom:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-from-dom@5.0.1/node_modules/hast-util-from-dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-from-html@2.0.3?package-id=1bb21ed7fa6518f5",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-from-html",
      "version": "2.0.3",
      "description": "hast utility to parse from HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-from-html:hast-util-from-html:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-from-html@2.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-html:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-from-html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_from_html:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-from-html@2.0.3/node_modules/hast-util-from-html/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-from-html-isomorphic@2.0.0?package-id=d1e8cc54ec13191f",
      "type": "library",
      "author": "Remco Haszing <remcohaszing@gmail.com>, Remco Haszing <remcohaszing@gmail.com>",
      "name": "hast-util-from-html-isomorphic",
      "version": "2.0.0",
      "description": "hast utility that turns HTML into a syntax tree (while being small in browsers)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-from-html-isomorphic:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-from-html-isomorphic@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-html-isomorphic:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html_isomorphic:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html_isomorphic:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-html:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-html:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_html:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-from-html-isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_from_html_isomorphic:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-from-html-isomorphic@2.0.0/node_modules/hast-util-from-html-isomorphic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-from-parse5@8.0.3?package-id=c8dba82978bd74dc",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-from-parse5",
      "version": "8.0.3",
      "description": "hast utility to transform from a `parse5` AST",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-from-parse5:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-from-parse5@8.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from-parse5:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_parse5:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from_parse5:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-from:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_from:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-from-parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_from_parse5:8.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-from-parse5@8.0.3/node_modules/hast-util-from-parse5/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-is-element@3.0.0?package-id=f130dee42a2709b8",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-is-element",
      "version": "3.0.0",
      "description": "hast utility to check if a node is a (certain) element",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-is-element:hast-util-is-element:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-is-element@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-is-element:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_is_element:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_is_element:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-is:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-is:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_is:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_is:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-is-element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_is_element:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-is-element@3.0.0/node_modules/hast-util-is-element/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-parse-selector@4.0.0?package-id=3523f1b6184b2a1f",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-parse-selector",
      "version": "4.0.0",
      "description": "hast utility to create an element from a simple CSS selector",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-parse-selector:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-parse-selector@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-parse-selector:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_parse_selector:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_parse_selector:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-parse:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-parse:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_parse:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_parse:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-parse-selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_parse_selector:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-parse-selector@4.0.0/node_modules/hast-util-parse-selector/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-raw@9.1.0?package-id=e7e7b226fad8fa88",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Christian Murphy <christian.murphy.42@gmail.com>, Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-raw",
      "version": "9.1.0",
      "description": "hast utility to reparse a tree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-raw:hast-util-raw:9.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-raw@9.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-raw:hast_util_raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_raw:hast-util-raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_raw:hast_util_raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_raw:9.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-raw@9.1.0/node_modules/hast-util-raw/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-to-html@9.0.5?package-id=b9a31224d2599284",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-to-html",
      "version": "9.0.5",
      "description": "hast utility to serialize to HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-to-html:hast-util-to-html:9.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-to-html@9.0.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-html:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_html:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_html:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-to-html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_to_html:9.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-to-html@9.0.5/node_modules/hast-util-to-html/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-to-jsx-runtime@2.3.6?package-id=ab596372a79c9026",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-to-jsx-runtime",
      "version": "2.3.6",
      "description": "hast utility to transform to preact, react, solid, svelte, vue, etc",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-to-jsx-runtime:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-to-jsx-runtime@2.3.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-jsx-runtime:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_jsx_runtime:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_jsx_runtime:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-jsx:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-jsx:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_jsx:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_jsx:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-to-jsx-runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_to_jsx_runtime:2.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-to-jsx-runtime@2.3.6/node_modules/hast-util-to-jsx-runtime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-to-parse5@8.0.0?package-id=375e7e641f172828",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-to-parse5",
      "version": "8.0.0",
      "description": "hast utility to transform to a `parse5` AST",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-to-parse5:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-to-parse5@8.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-parse5:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_parse5:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_parse5:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-to-parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_to_parse5:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-to-parse5@8.0.0/node_modules/hast-util-to-parse5/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-to-text@4.0.2?package-id=54b2bc6c9875e337",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-to-text",
      "version": "4.0.2",
      "description": "hast utility to get the plain-text value of a node according to the `innerText` algorithm",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-to-text:hast-util-to-text:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-to-text@4.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to-text:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_text:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to_text:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-to:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_to:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-to-text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_to_text:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-to-text@4.0.2/node_modules/hast-util-to-text/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hast-util-whitespace@3.0.0?package-id=2000ef2685b4526d",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hast-util-whitespace",
      "version": "3.0.0",
      "description": "hast utility to check if a node is inter-element whitespace",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hast-util-whitespace:hast-util-whitespace:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hast-util-whitespace@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util-whitespace:hast_util_whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_whitespace:hast-util-whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util_whitespace:hast_util_whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast-util-whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast-util:hast_util_whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast-util-whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast_util:hast_util_whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast-util-whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hast:hast_util_whitespace:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hast-util-whitespace@3.0.0/node_modules/hast-util-whitespace/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hastscript@9.0.1?package-id=67dee3d36513fc75",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "hastscript",
      "version": "9.0.1",
      "description": "hast utility to create trees",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hastscript:hastscript:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hastscript@9.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hastscript@9.0.1/node_modules/hastscript/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/helm.sh/helm/v3@v3.19.2?package-id=c131a40d7107234d",
      "type": "library",
      "name": "helm.sh/helm/v3",
      "version": "v3.19.2",
      "cpe": "cpe:2.3:a:helm:v3:v3.19.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/helm.sh/helm/v3@v3.19.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/helm.sh/helm/v3@v3.19.2?package-id=ee7104bb159325dd",
      "type": "library",
      "name": "helm.sh/helm/v3",
      "version": "v3.19.2",
      "cpe": "cpe:2.3:a:helm:v3:v3.19.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/helm.sh/helm/v3@v3.19.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hermes-estree@0.37.0?package-id=54df5bd85fa245d9",
      "type": "library",
      "name": "hermes-estree",
      "version": "0.37.0",
      "description": "Flow types for the Flow-ESTree spec produced by the hermes parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hermes-estree:hermes-estree:0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hermes-estree@0.37.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/hermes.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes-estree:hermes_estree:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes_estree:hermes-estree:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes_estree:hermes_estree:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes:hermes-estree:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes:hermes_estree:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hermes-estree@0.37.0/node_modules/hermes-estree/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hermes-parser@0.37.0?package-id=0580b9ccf3206ff7",
      "type": "library",
      "name": "hermes-parser",
      "version": "0.37.0",
      "description": "A JavaScript parser built from the Hermes engine",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hermes-parser:hermes-parser:0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hermes-parser@0.37.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/hermes.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes-parser:hermes_parser:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes_parser:hermes-parser:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes_parser:hermes_parser:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes:hermes-parser:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hermes:hermes_parser:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hermes-parser@0.37.0/node_modules/hermes-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.soot-oss/heros@1.2.4?package-id=0d5f7da8561c8e80",
      "type": "library",
      "group": "org.soot-oss",
      "name": "heros",
      "version": "1.2.4",
      "licenses": [
        {
          "license": {
            "name": "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url": "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.soot-oss:heros:1.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.soot-oss/heros@1.2.4",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "23cc3b3337f6c33c465995ecc778e381c99730fb"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot-oss:heros:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot_oss:heros:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:heros:heros:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot:heros:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.heros-1.2.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "heros"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.soot-oss"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.heros-1.2.4.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hosted-git-info@8.1.0?package-id=45acb0baf32458c8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "hosted-git-info",
      "version": "8.1.0",
      "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hosted-git-info@8.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/hosted-git-info.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/hosted-git-info",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git-info:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted-git-info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted-git-info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted-git-info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted-git-info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted-git-info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted_git_info:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/hosted-git-info@9.0.3?package-id=1609dbde660b13eb",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "hosted-git-info",
      "version": "9.0.3",
      "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:9.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/hosted-git-info@9.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/hosted-git-info.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/hosted-git-info",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git-info:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted-git-info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git_info:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted-git-info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted-git:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted-git-info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted_git:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted-git-info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hosted:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted-git-info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:hosted_git_info:9.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/hosted-git-info@9.0.3/node_modules/hosted-git-info/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/hostname@3.23%2Bnmu1?arch=amd64&distro=debian-12.15&package-id=6953da8863232503",
      "type": "library",
      "publisher": "Michael Meskes <meskes@debian.org>",
      "name": "hostname",
      "version": "3.23+nmu1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hostname:hostname:3.23\\+nmu1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/hostname@3.23%2Bnmu1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/hostname/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/hostname.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/hostname.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "46"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/html-url-attributes@3.0.1?package-id=2141e76c68ac08ff",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com>",
      "name": "html-url-attributes",
      "version": "3.0.1",
      "description": "Map of URL attributes in HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:html-url-attributes:html-url-attributes:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/html-url-attributes@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/rehypejs/rehype-minify/tree/main/packages/html-url-attributes",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-url-attributes:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_url_attributes:html-url-attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_url_attributes:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-url:html-url-attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-url:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_url:html-url-attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_url:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehypejs:html-url-attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehypejs:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html:html-url-attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html:html_url_attributes:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/html-url-attributes@3.0.1/node_modules/html-url-attributes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/html-void-elements@3.0.0?package-id=4175ae969d19b594",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "html-void-elements",
      "version": "3.0.0",
      "description": "List of HTML void tag names",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:html-void-elements:html-void-elements:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/html-void-elements@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-void-elements:html_void_elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_void_elements:html-void-elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_void_elements:html_void_elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-void:html-void-elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html-void:html_void_elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_void:html-void-elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html_void:html_void_elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html:html-void-elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:html:html_void_elements:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/html-void-elements@3.0.0/node_modules/html-void-elements/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/html2canvas@1.4.1?package-id=68cd9909f14daf12",
      "type": "library",
      "author": "Niklas von Hertzen <niklasvh@gmail.com> (https://hertzen.com)",
      "name": "html2canvas",
      "version": "1.4.1",
      "description": "Screenshots with JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:html2canvas:html2canvas:1.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/html2canvas@1.4.1",
      "externalReferences": [
        {
          "url": "https://html2canvas.hertzen.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/html2canvas@1.4.1/node_modules/html2canvas/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/htmlparser2@10.1.0?package-id=5b2fddb6ca754955",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "htmlparser2",
      "version": "10.1.0",
      "description": "Fast & forgiving HTML/XML parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:htmlparser2:htmlparser2:10.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/htmlparser2@10.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/htmlparser2.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:htmlparser2:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/htmlparser2@10.1.0/node_modules/htmlparser2/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=ed11127f70fb7fd0",
      "type": "library",
      "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
      "name": "http-cache-semantics",
      "version": "4.2.0",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/http-cache-semantics@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kornelski/http-cache-semantics.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/http-cache-semantics@4.2.0/node_modules/http-cache-semantics/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=611c659e55e9caad",
      "type": "library",
      "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
      "name": "http-cache-semantics",
      "version": "4.2.0",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/http-cache-semantics@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kornelski/http-cache-semantics.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/http-cache-semantics/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=83d3e58bdcd90e29",
      "type": "library",
      "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
      "name": "http-cache-semantics",
      "version": "4.2.0",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/http-cache-semantics@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kornelski/http-cache-semantics.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-errors@2.0.0?package-id=2fbd446b3b58640d",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "http-errors",
      "version": "2.0.0",
      "description": "Create HTTP error objects",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-errors:http-errors:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-errors@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-errors:http_errors:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_errors:http-errors:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_errors:http_errors:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-errors:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_errors:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/http-errors@2.0.0/node_modules/http-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-errors@2.0.1?package-id=c23d2dd71410ad7d",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "http-errors",
      "version": "2.0.1",
      "description": "Create HTTP error objects",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-errors:http-errors:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-errors@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-errors:http_errors:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_errors:http-errors:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_errors:http_errors:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-errors:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_errors:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/http-errors@2.0.1/node_modules/http-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=e176038470b463a4",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "http-proxy-agent",
      "version": "7.0.2",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-proxy-agent@7.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/http-proxy-agent@7.0.2/node_modules/http-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=8af1cfbd2179d986",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "http-proxy-agent",
      "version": "7.0.2",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-proxy-agent@7.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/http-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=ddd7695feddb6378",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "http-proxy-agent",
      "version": "7.0.2",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/http-proxy-agent@7.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=a2a63cbcf12d23d3",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/https-proxy-agent@7.0.6/node_modules/https-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=7ebedc2337f1c614",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/https-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=2105998da9ebbead",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=c23fdbb80f2b55df",
      "type": "library",
      "author": "dead-horse <dead_horse@qq.com> (http://deadhorse.me)",
      "name": "humanize-ms",
      "version": "1.2.1",
      "description": "transform humanize time to ms",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/humanize-ms@1.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/node-modules/humanize-ms",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/humanize-ms@1.2.1/node_modules/humanize-ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=2b2220d25f7adbd4",
      "type": "library",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.4.24",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/iconv-lite@0.4.24/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=c5474c3185a94f79",
      "type": "library",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.6.3",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/iconv-lite@0.6.3/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=1fb43f558f7280cb",
      "type": "library",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.6.3",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=a60484aa8f84423c",
      "type": "library",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.6.3",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iconv-lite@0.7.3?package-id=adc93ccf57856b6f",
      "type": "library",
      "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
      "name": "iconv-lite",
      "version": "0.7.3",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.7.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iconv-lite@0.7.3",
      "externalReferences": [
        {
          "url": "https://github.com/pillarjs/iconv-lite.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pillarjs/iconv-lite",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pillarjs:iconv-lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pillarjs:iconv_lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv-lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iconv:iconv_lite:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/iconv-lite@0.7.3/node_modules/iconv-lite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=3cd6a06d6f89fdbc",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>",
      "name": "ieee754",
      "version": "1.2.1",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/ieee754.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:ieee754:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ieee754@1.2.1/node_modules/ieee754/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ignore-walk@7.0.0?package-id=e85ac97f11075b21",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ignore-walk",
      "version": "7.0.0",
      "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ignore-walk@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ignore-walk.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore-walk:ignore_walk:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore_walk:ignore-walk:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore_walk:ignore_walk:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore:ignore-walk:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ignore:ignore_walk:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/immediate@3.0.6?package-id=cf732a5de8f24576",
      "type": "library",
      "author": "Domenic Denicola <domenic@domenicdenicola.com> (http://domenicdenicola.com), Donavon West <github@donavon.com> (http://donavon.com), Yaffle, Calvin Metcalf <calvin.metcalf@gmail.com>",
      "name": "immediate",
      "version": "3.0.6",
      "description": "A cross browser microtask library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:calvinmetcalf:immediate:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/immediate@3.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/calvinmetcalf/immediate.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:immediate:immediate:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/immediate@3.0.6/node_modules/immediate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=641ebb22988537d8",
      "type": "library",
      "author": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/imurmurhash@0.1.4/node_modules/imurmurhash/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=5d243cf5a895214e",
      "type": "library",
      "author": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/imurmurhash/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=fd492b2c3cfa6890",
      "type": "library",
      "author": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/imurmurhash/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/inflight@1.0.6?package-id=6955eb6ffdd66592",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "inflight",
      "version": "1.0.6",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "url": "https://github.com/npm/inflight.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/isaacs/inflight",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/inflight@1.0.6/node_modules/inflight/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/inherits@2.0.4?package-id=bb3e22e14c2c0725",
      "type": "library",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/inherits",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/inherits@2.0.4/node_modules/inherits/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ini@1.3.8?package-id=f5d8e059786c6704",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "ini",
      "version": "1.3.8",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/ini.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ini@1.3.8/node_modules/ini/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ini@5.0.0?package-id=0b0fc969321b8e1e",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ini",
      "version": "5.0.0",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ini_project:ini:5.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ini@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ini.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ini/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ini@6.0.0?package-id=eb35e9e2aed75df3",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ini",
      "version": "6.0.0",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ini_project:ini:6.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ini@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ini.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ini@6.0.0/node_modules/ini/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/init-package-json@7.0.2?package-id=849c3084ca749c2b",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "init-package-json",
      "version": "7.0.2",
      "description": "A node module to get your node module started",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:init-package-json:init-package-json:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/init-package-json@7.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/init-package-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package-json:init_package_json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package_json:init-package-json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package_json:init_package_json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package:init-package-json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-package:init_package_json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package:init-package-json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_package:init_package_json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init-package-json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init_package_json:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/init-system-helpers@1.65.2%2Bdeb12u1?arch=all&distro=debian-12.15&package-id=bc67df4e4ad2e833",
      "type": "library",
      "publisher": "Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>",
      "name": "init-system-helpers",
      "version": "1.65.2+deb12u1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/init-system-helpers@1.65.2%2Bdeb12u1?arch=all&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-system-helpers:init_system_helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_system_helpers:init-system-helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_system_helpers:init_system_helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-system:init-system-helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init-system:init_system_helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_system:init-system-helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init_system:init_system_helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init-system-helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:init:init_system_helpers:1.65.2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/init-system-helpers/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/init-system-helpers.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/init-system-helpers.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/init-system-helpers.postinst"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "133"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/inline-style-parser@0.2.4?package-id=8aa6eb5e27723fb7",
      "type": "library",
      "name": "inline-style-parser",
      "version": "0.2.4",
      "description": "An inline style parser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:inline-style-parser:inline-style-parser:0.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/inline-style-parser@0.2.4",
      "externalReferences": [
        {
          "url": "https://github.com/remarkablemark/inline-style-parser",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline-style-parser:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline_style_parser:inline-style-parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline_style_parser:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkablemark:inline-style-parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkablemark:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline-style:inline-style-parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline-style:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline_style:inline-style-parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline_style:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline:inline-style-parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inline:inline_style_parser:0.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/inline-style-parser@0.2.4/node_modules/inline-style-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/input-otp@1.4.2?package-id=13bd998db4a67479",
      "type": "library",
      "author": "Guilherme Rodz <g@rodz.dev>",
      "name": "input-otp",
      "version": "1.4.2",
      "description": "One-time password input component for React.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:input-otp:input-otp:1.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/input-otp@1.4.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/guilhermerodz/input-otp.git",
          "type": "distribution"
        },
        {
          "url": "https://input-otp.rodz.dev/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:input-otp:input_otp:1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:input_otp:input-otp:1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:input_otp:input_otp:1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:input:input-otp:1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:input:input_otp:1.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/input-otp@1.4.2_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/input-otp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/internmap@1.0.1?package-id=6aff51eda2d17380",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "internmap",
      "version": "1.0.1",
      "description": "Map and Set with automatic key interning",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:internmap:internmap:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/internmap@1.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/mbostock/internmap.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mbostock/internmap/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mbostock:internmap:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/internmap@1.0.1/node_modules/internmap/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/internmap@2.0.3?package-id=cd86e6c8f66b7d5a",
      "type": "library",
      "author": "Mike Bostock (https://bost.ocks.org/mike)",
      "name": "internmap",
      "version": "2.0.3",
      "description": "Map and Set with automatic key interning",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:internmap:internmap:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/internmap@2.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/mbostock/internmap.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mbostock/internmap/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mbostock:internmap:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/internmap@2.0.3/node_modules/internmap/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/iobuffer@5.4.0?package-id=2b0047ff6c3d212a",
      "type": "library",
      "author": "Michaël Zasso",
      "name": "iobuffer",
      "version": "5.4.0",
      "description": "Read and write binary data on ArrayBuffers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:image-js:iobuffer:5.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/iobuffer@5.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/image-js/iobuffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/image-js/iobuffer#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iobuffer:iobuffer:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/iobuffer@5.4.0/node_modules/iobuffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ip-address@10.0.1?package-id=5c35a1d948658df7",
      "type": "library",
      "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
      "name": "ip-address",
      "version": "10.0.1",
      "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ip-address@10.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/beaugunderson/ip-address.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/ip-address/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ip-address@10.1.0?package-id=5b862e19713e743b",
      "type": "library",
      "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
      "name": "ip-address",
      "version": "10.1.0",
      "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.1.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ip-address@10.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/beaugunderson/ip-address.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ip-address/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ip-address@10.2.0?package-id=046cf85a0bc8e3cd",
      "type": "library",
      "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
      "name": "ip-address",
      "version": "10.2.0",
      "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.2.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ip-address@10.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/beaugunderson/ip-address.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ip-address@10.2.0/node_modules/ip-address/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ip-regex@5.0.0?package-id=eebcfb610af6f7df",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "ip-regex",
      "version": "5.0.0",
      "description": "Regular expression for matching IP addresses (IPv4 & IPv6)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ip-regex:ip-regex:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ip-regex@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip-regex:ip_regex:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip_regex:ip-regex:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip_regex:ip_regex:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip:ip-regex:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ip:ip_regex:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ip-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=a9c203593d07aa15",
      "type": "library",
      "author": "whitequark <whitequark@whitequark.org>",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "url": "git://github.com/whitequark/ipaddr.js",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ipaddr.js@1.9.1/node_modules/ipaddr.js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-alphabetical@2.0.1?package-id=12301bb2e502c641",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "is-alphabetical",
      "version": "2.0.1",
      "description": "Check if a character is alphabetical",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-alphabetical:is-alphabetical:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-alphabetical@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-alphabetical:is_alphabetical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_alphabetical:is-alphabetical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_alphabetical:is_alphabetical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-alphabetical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_alphabetical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-alphabetical@2.0.1/node_modules/is-alphabetical/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-alphanumerical@2.0.1?package-id=ab21d7da77687303",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "is-alphanumerical",
      "version": "2.0.1",
      "description": "Check if a character is alphanumerical",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-alphanumerical:is-alphanumerical:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-alphanumerical@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-alphanumerical:is_alphanumerical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_alphanumerical:is-alphanumerical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_alphanumerical:is_alphanumerical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-alphanumerical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_alphanumerical:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-alphanumerical@2.0.1/node_modules/is-alphanumerical/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-cidr@5.1.1?package-id=47f53ee762c29906",
      "type": "library",
      "author": "silverwind <me@silverwind.io>, Felipe Apostol <flipjs.io@gmail.com> (http://flipjs.io/)",
      "name": "is-cidr",
      "version": "5.1.1",
      "description": "Check if a string is an IP address in CIDR notation",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-cidr:is-cidr:5.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-cidr@5.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-cidr:is_cidr:5.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_cidr:is-cidr:5.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_cidr:is_cidr:5.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-cidr:5.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_cidr:5.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-decimal@2.0.1?package-id=651731e4b4d77f90",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "is-decimal",
      "version": "2.0.1",
      "description": "Check if a character is decimal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-decimal:is-decimal:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-decimal@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-decimal:is_decimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_decimal:is-decimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_decimal:is_decimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-decimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_decimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-decimal@2.0.1/node_modules/is-decimal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=caeb63ed34654074",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=490cd61b7638b88c",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/is-fullwidth-code-point/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=4905562d3285cebc",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/is-fullwidth-code-point/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-hexadecimal@2.0.1?package-id=ddb0a55854b349b1",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "is-hexadecimal",
      "version": "2.0.1",
      "description": "Check if a character is hexadecimal",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-hexadecimal:is-hexadecimal:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-hexadecimal@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-hexadecimal:is_hexadecimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_hexadecimal:is-hexadecimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_hexadecimal:is_hexadecimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-hexadecimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_hexadecimal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-hexadecimal@2.0.1/node_modules/is-hexadecimal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/is-plain-obj@4.1.0?package-id=c6630caf885a623d",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "is-plain-obj",
      "version": "4.1.0",
      "description": "Check if a value is a plain object",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/is-plain-obj@4.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-plain-obj:is_plain_obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_plain_obj:is-plain-obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_plain_obj:is_plain_obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-plain:is-plain-obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is-plain:is_plain_obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_plain:is-plain-obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is_plain:is_plain_obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is-plain-obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:is:is_plain_obj:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/is-plain-obj@4.1.0/node_modules/is-plain-obj/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isarray@1.0.0?package-id=9d80813aedd51e78",
      "type": "library",
      "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/isarray.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/juliangruber/isarray",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/isarray@1.0.0/node_modules/isarray/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@2.0.0?package-id=a566df9016f62b3c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@2.0.0?package-id=ddf070ffaead9f45",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@2.0.0?package-id=01b14029c8eaf8e6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@3.1.1?package-id=12d71b51eed90920",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "3.1.1",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@3.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/isexe",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/node-gyp/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@3.1.5?package-id=f96bfdf5bf1e6cf5",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "3.1.5",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:3.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@3.1.5",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/isexe",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:3.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/isexe@3.1.5/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@3.1.5?package-id=b319d999d6a30194",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "3.1.5",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:3.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@3.1.5",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/isexe",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:3.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/which/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isexe@4.0.0?package-id=049d4a9abb3cbffc",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "isexe",
      "version": "4.0.0",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:isexe:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isexe@4.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/isexe",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isexe:isexe:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/isexe@4.0.0/node_modules/isexe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/isomorphic-ws@4.0.1?package-id=cbdc0bd744c14f1a",
      "type": "library",
      "author": "@heineiuo",
      "name": "isomorphic-ws",
      "version": "4.0.1",
      "description": "Isomorphic implementation of WebSocket",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isomorphic-ws:isomorphic-ws:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/isomorphic-ws@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/heineiuo/isomorphic-ws.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/heineiuo/isomorphic-ws#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isomorphic-ws:isomorphic_ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isomorphic_ws:isomorphic-ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isomorphic_ws:isomorphic_ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isomorphic:isomorphic-ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isomorphic:isomorphic_ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:heineiuo:isomorphic-ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:heineiuo:isomorphic_ws:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/isomorphic-ws@4.0.1_ws@7.5.13_bufferutil@4.1.0_utf-8-validate@6.0.6_/node_modules/isomorphic-ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?package-id=86027d8366d0410f",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:3.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a892ca9507839bbdb900d64310ac98256cab992f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.j2objc:j2objc-annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.j2objc:j2objc_annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.j2objc:j2objc:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.j2objc.j2objc-annotations-3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.j2objc.j2objc-annotations-3.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jackspeak@3.4.3?package-id=91675555b4b140b3",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/jackspeak.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jackspeak@3.4.3/node_modules/jackspeak/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jackspeak@3.4.3?package-id=1495b6245668ad0c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/jackspeak.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/jackspeak/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jackspeak@3.4.3?package-id=6975a29bffd3b97e",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/jackspeak.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/jackspeak/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?package-id=f0aa0e46f5396c5e",
      "type": "library",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "licenses": [
        {
          "license": {
            "name": "https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54f928fadec906a99d558536756d171917b9d936"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation_api:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation_api:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.ee4j:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.ee4j:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.glassfish:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.glassfish:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee4j:jakarta.annotation-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee4j:jakarta.annotation_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation-api:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation_api:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.ee4j:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.glassfish:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ee4j:ee4j:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/jakarta.annotation.jakarta.annotation-api-3.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/jakarta.annotation.jakarta.annotation-api-3.0.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.javaparser/javaparser-core@3.28.2?package-id=1857b37c64068ab6",
      "type": "library",
      "group": "com.github.javaparser",
      "name": "javaparser-core",
      "version": "3.28.2",
      "licenses": [
        {
          "license": {
            "name": "\"GNU Lesser General Public License\";link=\"http://www.gnu.org/licenses/lgpl-3.0.html\",\"Apache License, Version 2.0\";link=\"http://www.apache.org/licenses/LICENSE-2.0.txt\";description=\"A business-friendly OSS license\""
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.github.javaparser.javaparser-core:javaparser-core:3.28.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.github.javaparser/javaparser-core@3.28.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0f585a590072b20c6b4be3c35291b6e66a88b995"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser.javaparser-core:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser.javaparser-core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-core:javaparser-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-core:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_core:javaparser-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_core:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.javaparser.javaparser-core-3.28.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javaparser-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.javaparser"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.javaparser.javaparser-core-3.28.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.javaparser/javaparser-symbol-solver-core@3.28.2?package-id=0072c84fa0b75983",
      "type": "library",
      "group": "com.github.javaparser",
      "name": "javaparser-symbol-solver-core",
      "version": "3.28.2",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/lgpl-3.0.html"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.github.javaparser.symbolsolver.core:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.github.javaparser/javaparser-symbol-solver-core@3.28.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e65361e503ef42874d4622d66c837b77d1445f89"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser.symbolsolver.core:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver-core:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver-core:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver_core:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver_core:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser.symbolsolver.core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser.symbolsolver.core:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbolsolver:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbolsolver:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver-core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver_core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:javaparser-symbol-solver-core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:javaparser_symbol_solver_core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver-core:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver_core:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol-solver:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol_solver:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.javaparser:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbolsolver:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser-symbol:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser_symbol:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbolsolver:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:javaparser:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javaparser:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.28.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.javaparser.javaparser-symbol-solver-core-3.28.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javaparser-symbol-solver-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.javaparser"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.javaparser.javaparser-symbol-solver-core-3.28.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/javasrc2cpg_3@2.5.24?package-id=eba566ec524aa038",
      "type": "library",
      "name": "javasrc2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:javasrc2cpg-3:javasrc2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/javasrc2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8bbcc68584dcdd863a6a96178a8f98eff8eadb6"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javasrc2cpg-3:javasrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javasrc2cpg_3:javasrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javasrc2cpg_3:javasrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:javasrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:javasrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javasrc2cpg:javasrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javasrc2cpg:javasrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:javasrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:javasrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.javasrc2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.javasrc2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.javassist/javassist@3.31.0-GA?package-id=d3d547628f208e44",
      "type": "library",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.31.0-GA",
      "licenses": [
        {
          "license": {
            "name": "https://www.mozilla.org/en-US/MPL/1.1/, https://www.gnu.org/licenses/lgpl-2.1.html, https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shigeru-chiba\\,-www-javassist-org:javassist:3.31.0-GA:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.javassist/javassist@3.31.0-GA",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1f3dea3154928f85fd520c2a8743522dc820b000"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shigeru_chiba\\,_www_javassist_org:javassist:3.31.0-GA:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.javassist:javassist:3.31.0-GA:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javassist:javassist:3.31.0-GA:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.javassist.javassist-3.31.0-GA.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javassist"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.javassist"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.javassist.javassist-3.31.0-GA.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.typelevel/jawn-parser_3@1.6.0?package-id=fb510379cd4e1b67",
      "type": "library",
      "name": "jawn-parser_3",
      "version": "1.6.0",
      "cpe": "cpe:2.3:a:jawn-parser-3:jawn-parser-3:1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.typelevel/jawn-parser_3@1.6.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a89f3e40146a2afb775baafa89c7493506403856"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser-3:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser-3:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser_3:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser_3:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser_3:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser_3:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser_3:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser_3:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.typelevel:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn-parser:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn_parser:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typelevel:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn:jawn-parser-3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn:jawn-parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jawn:jawn_parser_3:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.jawn-parser_3-1.6.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.typelevel.jawn-parser_3-1.6.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jayson@4.3.0?package-id=ce68b2bb17e60541",
      "type": "library",
      "author": "Tedde Lundgren <mail@tedeh.net> (https://tedeh.net), Tedde Lundgren <mail@tedeh.net> (https://tedeh.net), Daniel Vicory <dvicory@gmail.com> (http://bzfx.net), Jonathan Liu <net147@gmail.com>, Tedde Lundgren <mail@tedeh.net> (https://tedeh.net)",
      "name": "jayson",
      "version": "4.3.0",
      "description": "JSON-RPC 1.0/2.0 compliant server and client",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jayson:jayson:4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jayson@4.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/tedeh/jayson.git",
          "type": "distribution"
        },
        {
          "url": "https://jayson.tedeh.net",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tedeh:jayson:4.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jayson@4.3.0_bufferutil@4.1.0_utf-8-validate@6.0.6/node_modules/jayson/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/jimple2cpg_3@2.5.24?package-id=70bbba07c3629cf2",
      "type": "library",
      "name": "jimple2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:jimple2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/jimple2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6b5ea7b62201b64c88ea7e2a338ee3afea5dfb12"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:jimple2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg-3:jimple2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg-3:jimple2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg_3:jimple2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg_3:jimple2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg:jimple2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jimple2cpg:jimple2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:jimple2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:jimple2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.jimple2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.jimple2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jiti@2.6.1?package-id=fa91c6fd2549f22e",
      "type": "library",
      "name": "jiti",
      "version": "2.6.1",
      "description": "Runtime typescript and ESM support for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jiti:jiti:2.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jiti@2.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jiti@2.6.1/node_modules/jiti/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.jline/jline-reader@3.19.0?package-id=ece6379980ce235c",
      "type": "library",
      "group": "org.jline",
      "name": "jline-reader",
      "version": "3.19.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.jline.reader:jline-reader:3.19.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.jline/jline-reader@3.19.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0645d72953711ee4e61705bc5e576fdd1f22c087"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.reader:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-reader:jline-reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-reader:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_reader:jline-reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_reader:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.reader:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline-reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-reader:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_reader:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reader:jline-reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reader:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline-reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline_reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reader:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:reader:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-reader-3.19.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jline-reader"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jline"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-reader-3.19.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.jline/jline-terminal@3.19.0?package-id=3697e8babff4695e",
      "type": "library",
      "group": "org.jline",
      "name": "jline-terminal",
      "version": "3.19.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.jline.terminal:jline-terminal:3.19.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.jline/jline-terminal@3.19.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d4a75a8be7490c8529c029d6baa59e838f45f22e"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.terminal:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:jline-terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:jline-terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.terminal:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline-terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:jline-terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline-terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline_terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:terminal:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-terminal-3.19.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jline-terminal"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jline"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-terminal-3.19.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.jline/jline-terminal-jna@3.19.0?package-id=a244fcca3d311a49",
      "type": "library",
      "group": "org.jline",
      "name": "jline-terminal-jna",
      "version": "3.19.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.jline.terminal-jna:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.jline/jline-terminal-jna@3.19.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c9f9071612424157ca3d5a774a42f2c9b44c10ef"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.terminal-jna:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal-jna:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal-jna:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal_jna:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal_jna:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.terminal-jna:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline.terminal-jna:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal-jna:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal-jna:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal_jna:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal_jna:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal-jna:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal-jna:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal_jna:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal_jna:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline-terminal:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline_terminal:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal-jna:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal-jna:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal_jna:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal_jna:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline-terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:jline_terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jline:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:terminal:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:terminal-jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jline:terminal_jna:3.19.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-terminal-jna-3.19.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jline-terminal-jna"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jline"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jline.jline-terminal-jna-3.19.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna/jna@5.18.1?package-id=befb9340c6a70a1e",
      "type": "library",
      "name": "jna",
      "version": "5.18.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jna-development-team:jna:5.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.sun.jna/jna@5.18.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b27ba04287cc4abe769642fe8318d39fc89bf937"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.java.dev.jna.jna-5.18.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.java.dev.jna.jna-5.18.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna/jna-platform@5.18.1?package-id=c316d570fda648da",
      "type": "library",
      "name": "jna-platform",
      "version": "5.18.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.sun.jna.platform:jna-platform:5.18.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.sun.jna/jna-platform@5.18.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dd817f391efc492041c9ae91127527c13750a789"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna.platform:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna.platform:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna.platform:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna-platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna_platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.sun.jna:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:platform:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:5.18.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.java.dev.jna.jna-platform-5.18.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.java.dev.jna.jna-platform-5.18.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=6782720d62266239",
      "type": "library",
      "author": "Simon Lydell",
      "name": "js-tokens",
      "version": "4.0.0",
      "description": "A regex that tokenizes JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/js-tokens@4.0.0/node_modules/js-tokens/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/js-yaml@4.3.1?package-id=c3cd42d1ac717e22",
      "type": "library",
      "author": "Vladimir Zapparov <dervus.grim@gmail.com>, Aleksey V Zapparov <ixti@member.fsf.org> (http://www.ixti.net/), Vitaly Puzrin <vitaly@rcdesign.ru> (https://github.com/puzrin), Martin Grenfell <martin.grenfell@gmail.com> (http://got-ravings.blogspot.com)",
      "name": "js-yaml",
      "version": "4.3.1",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nodeca:js-yaml:4.3.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/js-yaml@4.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/js-yaml@4.3.1/node_modules/js-yaml/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jsesc@3.1.0?package-id=a662d56aa9d50cc4",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/)",
      "name": "jsesc",
      "version": "3.1.0",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:jsesc:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/jsesc.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/jsesc",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsesc:jsesc:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jsesc@3.1.0/node_modules/jsesc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-parse-even-better-errors@4.0.0?package-id=d2ecbd85d53358bf",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "json-parse-even-better-errors",
      "version": "4.0.0",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-parse-even-better-errors@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/json-parse-even-better-errors.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better-errors:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-parse-even-better-errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_parse_even_better_errors:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-parse-even-better-errors@5.0.0?package-id=b44613763c9743a8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "json-parse-even-better-errors",
      "version": "5.0.0",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-parse-even-better-errors@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/json-parse-even-better-errors.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better-errors:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better_errors:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even-better:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even_better:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse-even:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse_even:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-parse:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_parse:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-parse-even-better-errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_parse_even_better_errors:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/json-parse-even-better-errors@5.0.0/node_modules/json-parse-even-better-errors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0?package-id=82f17a4e7dfcc5f2",
      "type": "library",
      "author": "Evgeny Poberezkin",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-schema-traverse:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_schema_traverse:json-schema-traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_schema_traverse:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epoberezkin:json-schema-traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epoberezkin:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-schema:json-schema-traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-schema:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_schema:json-schema-traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_schema:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-schema-traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_schema_traverse:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/json-schema-traverse@1.0.0/node_modules/json-schema-traverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=6f63fadeee4df15a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "json-stringify-nice",
      "version": "1.1.4",
      "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-stringify-nice@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/json-stringify-nice",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify-nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/json-stringify-nice@1.1.4/node_modules/json-stringify-nice/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=50fdcb403b0a66a9",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "json-stringify-nice",
      "version": "1.1.4",
      "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-stringify-nice@1.1.4",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/json-stringify-nice",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify-nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-stringify-nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_stringify_nice:1.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=debc946a8e18764d",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me), Andri Möll <andri@dot.ee> (http://themoll.com)",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/json-stringify-safe",
          "type": "distribution"
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify-safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify_safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/json-stringify-safe@5.0.1/node_modules/json-stringify-safe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/json5@2.2.3?package-id=99d1c6cc2a6de65d",
      "type": "library",
      "author": "Aseem Kishore <aseem.kishore@gmail.com>, Max Nanasy <max.nanasy@gmail.com>, Andrew Eisenberg <andrew@eisenberg.as>, Jordan Tucker <jordanbtucker@gmail.com>",
      "name": "json5",
      "version": "2.2.3",
      "description": "JSON for Humans",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/json5@2.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/json5/json5.git",
          "type": "distribution"
        },
        {
          "url": "http://json5.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/json5@2.2.3/node_modules/json5/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jsonata@2.2.2?package-id=cb9ac2ab053d440c",
      "type": "library",
      "name": "jsonata",
      "version": "2.2.2",
      "description": "JSON query and transformation language",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jsonata-js:jsonata:2.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jsonata@2.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/jsonata-js/jsonata.git",
          "type": "distribution"
        },
        {
          "url": "http://jsonata.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonata:jsonata:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jsonata@2.2.2/node_modules/jsonata/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=d8e77ac9aaf7b698",
      "type": "library",
      "author": "Tim Caswell <tim@creationix.com>",
      "name": "jsonparse",
      "version": "1.3.1",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "http://github.com/creationix/jsonparse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonparse:jsonparse:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jspdf@4.2.1?package-id=e5875949d8679d4e",
      "type": "library",
      "name": "jspdf",
      "version": "4.2.1",
      "description": "PDF Document creation from JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parall:jspdf:4.2.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/jspdf@4.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/parallax/jsPDF.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/parallax/jsPDF",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jspdf@4.2.1/node_modules/jspdf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.jspecify.jspecify/jspecify@1.0.0?package-id=5d771f733a999769",
      "type": "library",
      "name": "jspecify",
      "version": "1.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.jspecify.jspecify:jspecify:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.jspecify.jspecify/jspecify@1.0.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jspecify:jspecify:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jspecify.jspecify-1.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.jspecify.jspecify-1.0.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=d8f0f7ac7a2c227a",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.google.code.findbugs:jsr305:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.sonatype.oss:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jsr-305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:findbugs:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr-305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr_305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.code.findbugs.jsr305-3.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr305"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.findbugs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.code.findbugs.jsr305-3.0.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/jssrc2cpg_3@2.5.24?package-id=0835efaa5895db91",
      "type": "library",
      "name": "jssrc2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:jssrc2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/jssrc2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c526ce161e5624dceef7e5dff8a01e7d3916da"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:jssrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg-3:jssrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg-3:jssrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg_3:jssrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg_3:jssrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:jssrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:jssrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg:jssrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jssrc2cpg:jssrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.jssrc2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.jssrc2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/jszip@3.10.1?package-id=555c76d8e048f093",
      "type": "library",
      "author": "Stuart Knightley <stuart@stuartk.com>, Franz Buchinger, António Afonso, David Duponchel, yiminghe",
      "name": "jszip",
      "version": "3.10.1",
      "description": "Create, read and edit .zip files with JavaScript http://stuartk.com/jszip",
      "licenses": [
        {
          "expression": "MIT OR GPL-3.0-or-later"
        }
      ],
      "cpe": "cpe:2.3:a:jszip_project:jszip:3.10.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/jszip@3.10.1",
      "externalReferences": [
        {
          "url": "https://github.com/Stuk/jszip.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/jszip@3.10.1/node_modules/jszip/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/just-diff@6.0.2?package-id=3cfafabee354cfc6",
      "type": "library",
      "author": "Angus Croll",
      "name": "just-diff",
      "version": "6.0.2",
      "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff:just-diff:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff@6.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/just-diff@6.0.2/node_modules/just-diff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/just-diff@6.0.2?package-id=f796cddf4bd7dca6",
      "type": "library",
      "author": "Angus Croll",
      "name": "just-diff",
      "version": "6.0.2",
      "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff:just-diff:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff@6.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/just-diff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/just-diff-apply@5.5.0?package-id=95b636674fca06e0",
      "type": "library",
      "author": "Angus Croll",
      "name": "just-diff-apply",
      "version": "5.5.0",
      "description": "Apply a diff to an object. Optionally supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff-apply@5.5.0",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff-apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/just-diff-apply@5.5.0/node_modules/just-diff-apply/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/just-diff-apply@5.5.0?package-id=33df8b5c29d05ba0",
      "type": "library",
      "author": "Angus Croll",
      "name": "just-diff-apply",
      "version": "5.5.0",
      "description": "Apply a diff to an object. Optionally supports jsonPatch protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/just-diff-apply@5.5.0",
      "externalReferences": [
        {
          "url": "https://github.com/angus-c/just",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff-apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff_apply:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just-diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just_diff:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:angus-c:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just-diff-apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:just:just_diff_apply:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/api@v0.34.2?package-id=27b54ce557fe075e",
      "type": "library",
      "name": "k8s.io/api",
      "version": "v0.34.2",
      "purl": "pkg:golang/k8s.io/api@v0.34.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/api@v0.34.2?package-id=6871f02d417490af",
      "type": "library",
      "name": "k8s.io/api",
      "version": "v0.34.2",
      "purl": "pkg:golang/k8s.io/api@v0.34.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0?package-id=ce67bda5f2e421dc",
      "type": "library",
      "name": "k8s.io/apiextensions-apiserver",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:B3hiB32jV7BcyKcMU5fDaDxk882YrJ1KU+ZSkA9Qxoc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0?package-id=18e02c08c1e4126e",
      "type": "library",
      "name": "k8s.io/apiextensions-apiserver",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:B3hiB32jV7BcyKcMU5fDaDxk882YrJ1KU+ZSkA9Qxoc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.34.2?package-id=4971c83392ab7476",
      "type": "library",
      "name": "k8s.io/apimachinery",
      "version": "v0.34.2",
      "purl": "pkg:golang/k8s.io/apimachinery@v0.34.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.34.2?package-id=822e2ab779b309bd",
      "type": "library",
      "name": "k8s.io/apimachinery",
      "version": "v0.34.2",
      "purl": "pkg:golang/k8s.io/apimachinery@v0.34.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apiserver@v0.34.0?package-id=a1f7569a37de70f0",
      "type": "library",
      "name": "k8s.io/apiserver",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/apiserver@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Z51fw1iGMqN7uJ1kEaynf2Aec1Y774PqU+FVWCFV3Jg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apiserver@v0.34.0?package-id=f094c9d2a5054c8d",
      "type": "library",
      "name": "k8s.io/apiserver",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/apiserver@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Z51fw1iGMqN7uJ1kEaynf2Aec1Y774PqU+FVWCFV3Jg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/cli-runtime@v0.34.0?package-id=5791867cd011a060",
      "type": "library",
      "name": "k8s.io/cli-runtime",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/cli-runtime@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:N2/rUlJg6TMEBgtQ3SDRJwa8XyKUizwjlOknT1mB2Cw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/cli-runtime@v0.34.0?package-id=aca5b1923d0e9f36",
      "type": "library",
      "name": "k8s.io/cli-runtime",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/cli-runtime@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:N2/rUlJg6TMEBgtQ3SDRJwa8XyKUizwjlOknT1mB2Cw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/client-go@v0.34.1?package-id=430b0cb29a078cf3",
      "type": "library",
      "name": "k8s.io/client-go",
      "version": "v0.34.1",
      "purl": "pkg:golang/k8s.io/client-go@v0.34.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZUPJKgXsnKwVwmKKdPfw4tB58+7/Ik3CrjOEhsiZ7mY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/client-go@v0.34.1?package-id=825eb8d94fe11c06",
      "type": "library",
      "name": "k8s.io/client-go",
      "version": "v0.34.1",
      "purl": "pkg:golang/k8s.io/client-go@v0.34.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZUPJKgXsnKwVwmKKdPfw4tB58+7/Ik3CrjOEhsiZ7mY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/component-base@v0.34.0?package-id=f170fa652eaa1603",
      "type": "library",
      "name": "k8s.io/component-base",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/component-base@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bS8Ua3zlJzapklsB1dZgjEJuJEeHjj8yTu1gxE2zQX8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/component-base@v0.34.0?package-id=b778222566c77173",
      "type": "library",
      "name": "k8s.io/component-base",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/component-base@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bS8Ua3zlJzapklsB1dZgjEJuJEeHjj8yTu1gxE2zQX8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.130.1?package-id=1d540f9558e09715",
      "type": "library",
      "name": "k8s.io/klog/v2",
      "version": "v2.130.1",
      "cpe": "cpe:2.3:a:klog:v2:v2.130.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/k8s.io/klog/v2@v2.130.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.130.1?package-id=e888845c0674ba7c",
      "type": "library",
      "name": "k8s.io/klog/v2",
      "version": "v2.130.1",
      "cpe": "cpe:2.3:a:klog:v2:v2.130.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/k8s.io/klog/v2@v2.130.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b?package-id=1407672862fbfdb0",
      "type": "library",
      "name": "k8s.io/kube-openapi",
      "version": "v0.0.0-20250710124328-f3f2b991d03b",
      "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b?package-id=47c64a95ccbcdcd0",
      "type": "library",
      "name": "k8s.io/kube-openapi",
      "version": "v0.0.0-20250710124328-f3f2b991d03b",
      "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kubectl@v0.34.0?package-id=feedef23b8355145",
      "type": "library",
      "name": "k8s.io/kubectl",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/kubectl@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NcXz4TPTaUwhiX4LU+6r6udrlm0NsVnSkP3R9t0dmxs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kubectl@v0.34.0?package-id=2b0573c9848384b2",
      "type": "library",
      "name": "k8s.io/kubectl",
      "version": "v0.34.0",
      "purl": "pkg:golang/k8s.io/kubectl@v0.34.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NcXz4TPTaUwhiX4LU+6r6udrlm0NsVnSkP3R9t0dmxs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397?package-id=c91ca55f5b02135b",
      "type": "library",
      "name": "k8s.io/utils",
      "version": "v0.0.0-20250604170112-4c0f3b243397",
      "purl": "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hwvWFiBzdWw1FhfY1FooPn3kzWuJ8tmbZBHi4zVsl1Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397?package-id=d037e616e0ae27d9",
      "type": "library",
      "name": "k8s.io/utils",
      "version": "v0.0.0-20250604170112-4c0f3b243397",
      "purl": "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hwvWFiBzdWw1FhfY1FooPn3kzWuJ8tmbZBHi4zVsl1Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/katex@0.16.25?package-id=423c66ec0a860779",
      "type": "library",
      "name": "katex",
      "version": "0.16.25",
      "description": "Fast math typesetting for the web.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:KaTeX:katex:0.16.25:*:*:*:*:*:*:*",
      "purl": "pkg:npm/katex@0.16.25",
      "externalReferences": [
        {
          "url": "https://github.com/KaTeX/KaTeX.git",
          "type": "distribution"
        },
        {
          "url": "https://katex.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:katex:katex:0.16.25:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/katex@0.16.25/node_modules/katex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/khroma@2.1.0?package-id=2f8584aa27759d25",
      "type": "library",
      "name": "khroma",
      "version": "2.1.0",
      "description": "A collection of functions for manipulating CSS colors, inspired by SASS.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:khroma:khroma:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/khroma@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/khroma@2.1.0/node_modules/khroma/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/kolorist@1.8.0?package-id=f6de57ba79c1eff4",
      "type": "library",
      "author": "Marvin Hagemeister <hello@marvinh.dev>",
      "name": "kolorist",
      "version": "1.8.0",
      "description": "A tiny utility to colorize stdin/stdout",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:marvinhagemeister:kolorist:1.8.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/kolorist@1.8.0",
      "externalReferences": [
        {
          "url": "https://github.com/marvinhagemeister/kolorist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kolorist:kolorist:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/kolorist@1.8.0/node_modules/kolorist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/langium@3.3.1?package-id=c35e29e727bb8244",
      "type": "library",
      "author": "TypeFox (https://www.typefox.io)",
      "name": "langium",
      "version": "3.3.1",
      "description": "A language engineering tool for the Language Server Protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eclipse-langium:langium:3.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/langium@3.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-langium/langium",
          "type": "distribution"
        },
        {
          "url": "https://langium.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langium:langium:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/langium@3.3.1/node_modules/langium/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/layout-base@1.0.2?package-id=9cd79ea065a44bc5",
      "type": "library",
      "name": "layout-base",
      "version": "1.0.2",
      "description": "Basic layout model and some utilities for Cytoscape.js layout extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iVis-at-Bilkent:layout-base:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/layout-base@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/iVis-at-Bilkent/layout-base.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iVis-at-Bilkent/layout-base#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:layout_base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout-base:layout-base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout-base:layout_base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout_base:layout-base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout_base:layout_base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout:layout-base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout:layout_base:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/layout-base@1.0.2/node_modules/layout-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/layout-base@2.0.1?package-id=0b74c3126406a61e",
      "type": "library",
      "name": "layout-base",
      "version": "2.0.1",
      "description": "Basic layout model and some utilities for Cytoscape.js layout extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:iVis-at-Bilkent:layout-base:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/layout-base@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/iVis-at-Bilkent/layout-base.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iVis-at-Bilkent/layout-base#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iVis-at-Bilkent:layout_base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout-base:layout-base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout-base:layout_base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout_base:layout-base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout_base:layout_base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout:layout-base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:layout:layout_base:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/layout-base@2.0.1/node_modules/layout-base/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lazystream@1.0.1?package-id=4fbce2ec87457120",
      "type": "library",
      "author": "Jonas Pommerening <jonas.pommerening@gmail.com> (https://npmjs.org/~jpommerening), Mario Casciaro <mariocasciaro@gmail.com>",
      "name": "lazystream",
      "version": "1.0.1",
      "description": "Open Node Streams on demand.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jpommerening:lazystream:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lazystream@1.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/jpommerening/node-lazystream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jpommerening/node-lazystream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lazystream@1.0.1/node_modules/lazystream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&package-id=d047530090108251&upstream=acl",
      "type": "library",
      "publisher": "Guillem Jover <guillem@debian.org>",
      "name": "libacl1",
      "version": "2.3.1-3",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libacl1:libacl1:2.3.1-3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&upstream=acl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libacl1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libacl1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "73"
        },
        {
          "name": "syft:metadata:source",
          "value": "acl"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64&distro=debian-12.15&package-id=91b1396a4c2e715d&upstream=apt",
      "type": "library",
      "publisher": "APT Development Team <deity@lists.debian.org>",
      "name": "libapt-pkg6.0",
      "version": "2.6.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64&distro=debian-12.15&upstream=apt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libapt-pkg6.0:libapt_pkg6.0:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libapt_pkg6.0:libapt-pkg6.0:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libapt_pkg6.0:libapt_pkg6.0:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libapt:libapt-pkg6.0:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libapt:libapt_pkg6.0:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libapt-pkg6.0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libapt-pkg6.0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "3297"
        },
        {
          "name": "syft:metadata:source",
          "value": "apt"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libattr1@1%3A2.5.1-4?arch=amd64&distro=debian-12.15&package-id=722285f8005c2384&upstream=attr",
      "type": "library",
      "publisher": "Guillem Jover <guillem@debian.org>",
      "name": "libattr1",
      "version": "1:2.5.1-4",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.5.1-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libattr1@1%3A2.5.1-4?arch=amd64&distro=debian-12.15&upstream=attr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libattr1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libattr1:amd64.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libattr1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "59"
        },
        {
          "name": "syft:metadata:source",
          "value": "attr"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libaudit-common@1%3A3.0.9-1?arch=all&distro=debian-12.15&package-id=e35c37c43c21e3d0&upstream=audit",
      "type": "library",
      "publisher": "Laurent Bigonville <bigon@debian.org>",
      "name": "libaudit-common",
      "version": "1:3.0.9-1",
      "licenses": [
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.0.9-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libaudit-common@1%3A3.0.9-1?arch=all&distro=debian-12.15&upstream=audit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libaudit-common:libaudit_common:1\\:3.0.9-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libaudit_common:libaudit-common:1\\:3.0.9-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libaudit_common:libaudit_common:1\\:3.0.9-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libaudit:libaudit-common:1\\:3.0.9-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libaudit:libaudit_common:1\\:3.0.9-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libaudit-common/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libaudit-common.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libaudit-common.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/libaudit-common.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "22"
        },
        {
          "name": "syft:metadata:source",
          "value": "audit"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
      "type": "library",
      "publisher": "Laurent Bigonville <bigon@debian.org>",
      "name": "libaudit1",
      "version": "1:3.0.9-1",
      "licenses": [
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.0.9-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&upstream=audit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libaudit1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libaudit1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "150"
        },
        {
          "name": "syft:metadata:source",
          "value": "audit"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "libblkid1",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libblkid1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libblkid1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "398"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libbsd0@0.11.7-2?arch=amd64&distro=debian-12.15&package-id=6e136a5b8871310d&upstream=libbsd",
      "type": "library",
      "publisher": "Guillem Jover <guillem@debian.org>",
      "name": "libbsd0",
      "version": "0.11.7-2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "libutil-David-Nugent"
          }
        },
        {
          "license": {
            "name": "BSD-2-clause-author"
          }
        },
        {
          "license": {
            "name": "BSD-2-clause-verbatim"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-John-Birrell"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-Regents"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-author"
          }
        },
        {
          "license": {
            "name": "BSD-4-clause-Niels-Provos"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "ISC-Original"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.11.7-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libbsd0@0.11.7-2?arch=amd64&distro=debian-12.15&upstream=libbsd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libbsd0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libbsd0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "202"
        },
        {
          "name": "syft:metadata:source",
          "value": "libbsd"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
      "type": "library",
      "publisher": "Anibal Monsalve Salazar <anibal@debian.org>",
      "name": "libbz2-1.0",
      "version": "1.0.8-5+b1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "name": "BSD-variant"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&upstream=bzip2%401.0.8-5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libbz2-1.0:libbz2_1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libbz2_1.0:libbz2-1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libbz2_1.0:libbz2_1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libbz2:libbz2-1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libbz2:libbz2_1.0:1.0.8-5\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libbz2-1.0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libbz2-1.0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "106"
        },
        {
          "name": "syft:metadata:source",
          "value": "bzip2"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.0.8-5"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=0d487d9c5e9a860d&upstream=glibc",
      "type": "library",
      "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
      "name": "libc-bin",
      "version": "2.36-9+deb12u14",
      "licenses": [
        {
          "license": {
            "name": "sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&upstream=glibc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libc-bin:libc_bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libc_bin:libc-bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libc_bin:libc_bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libc:libc-bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libc:libc_bin:2.36-9\\+deb12u14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libc-bin/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libc-bin.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libc-bin.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/libc-bin.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/libc-bin.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/libc-bin.triggers"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2042"
        },
        {
          "name": "syft:metadata:source",
          "value": "glibc"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
      "type": "library",
      "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
      "name": "libc6",
      "version": "2.36-9+deb12u14",
      "licenses": [
        {
          "license": {
            "name": "sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libc6:libc6:2.36-9\\+deb12u14:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&upstream=glibc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libc6/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libc6:amd64.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libc6:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "13001"
        },
        {
          "name": "syft:metadata:source",
          "value": "glibc"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64&distro=debian-12.15&package-id=9a34227939df7216&upstream=libcap-ng%400.8.3-1",
      "type": "library",
      "publisher": "Håvard F. Aasen <havard.f.aasen@pfft.no>",
      "name": "libcap-ng0",
      "version": "0.8.3-1+b3",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64&distro=debian-12.15&upstream=libcap-ng%400.8.3-1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap-ng0:libcap_ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng0:libcap-ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng0:libcap_ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap-ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap_ng0:0.8.3-1\\+b3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libcap-ng0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libcap-ng0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "65"
        },
        {
          "name": "syft:metadata:source",
          "value": "libcap-ng"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "0.8.3-1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libcap2@1%3A2.66-4%2Bdeb12u3%2Bb1?arch=amd64&distro=debian-12.15&package-id=655ca54e08012b99&upstream=libcap2%401%3A2.66-4%2Bdeb12u3",
      "type": "library",
      "publisher": "Christian Kastner <ckk@debian.org>",
      "name": "libcap2",
      "version": "1:2.66-4+deb12u3+b1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.66-4\\+deb12u3\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libcap2@1%3A2.66-4%2Bdeb12u3%2Bb1?arch=amd64&distro=debian-12.15&upstream=libcap2%401%3A2.66-4%2Bdeb12u3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libcap2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libcap2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "95"
        },
        {
          "name": "syft:metadata:source",
          "value": "libcap2"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1:2.66-4+deb12u3"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libcbor0.8@0.8.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=d8e89a302ab66466&upstream=libcbor%400.8.0-2",
      "type": "library",
      "publisher": "Vincent Bernat <bernat@debian.org>",
      "name": "libcbor0.8",
      "version": "0.8.0-2+b1",
      "licenses": [
        {
          "license": {
            "name": "Expat"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcbor0.8:libcbor0.8:0.8.0-2\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libcbor0.8@0.8.0-2%2Bb1?arch=amd64&distro=debian-12.15&upstream=libcbor%400.8.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libcbor0.8/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libcbor0.8:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "98"
        },
        {
          "name": "syft:metadata:source",
          "value": "libcbor"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "0.8.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2",
      "type": "library",
      "publisher": "Theodore Y. Ts'o <tytso@mit.edu>",
      "name": "libcom-err2",
      "version": "1.47.0-2+b2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "Kazlib"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.47.0-2\\+b2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&upstream=e2fsprogs%401.47.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom-err2:libcom_err2:1.47.0-2\\+b2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err2:libcom-err2:1.47.0-2\\+b2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err2:libcom_err2:1.47.0-2\\+b2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom-err2:1.47.0-2\\+b2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom_err2:1.47.0-2\\+b2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libcom-err2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libcom-err2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "55"
        },
        {
          "name": "syft:metadata:source",
          "value": "e2fsprogs"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.47.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
      "type": "library",
      "publisher": "Marco d'Itri <md@linux.it>",
      "name": "libcrypt1",
      "version": "1:4.4.33-2",
      "licenses": [
        {
          "license": {
            "name": "sha256:5a5e7ca0e9f3f9679977e3a3e9ede45ad92885a3297ea78e766979f9866c5a16"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.33-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&upstream=libxcrypt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libcrypt1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libcrypt1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "233"
        },
        {
          "name": "syft:metadata:source",
          "value": "libxcrypt"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=amd64&distro=debian-12.15&package-id=b0cb4641a25bfdd2&upstream=db5.3",
      "type": "library",
      "publisher": "Bastian Germann <bage@debian.org>",
      "name": "libdb5.3",
      "version": "5.3.28+dfsg2-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "MS-PL"
          }
        },
        {
          "license": {
            "id": "Sleepycat"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "id": "Zlib"
          }
        },
        {
          "license": {
            "name": "Artistic"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-fjord"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "MIT-old"
          }
        },
        {
          "license": {
            "name": "TCL-like"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg2-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=amd64&distro=debian-12.15&upstream=db5.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libdb5.3/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libdb5.3:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1833"
        },
        {
          "name": "syft:metadata:source",
          "value": "db5.3"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libdebconfclient0@0.270?arch=amd64&distro=debian-12.15&package-id=2690aae2bbaa51bf&upstream=cdebconf",
      "type": "library",
      "publisher": "Debian Install System Team <debian-boot@lists.debian.org>",
      "name": "libdebconfclient0",
      "version": "0.270",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.270:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libdebconfclient0@0.270?arch=amd64&distro=debian-12.15&upstream=cdebconf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libdebconfclient0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libdebconfclient0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "37"
        },
        {
          "name": "syft:metadata:source",
          "value": "cdebconf"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libedit2@3.1-20221030-2?arch=amd64&distro=debian-12.15&package-id=8f19d012fa950b7b&upstream=libedit",
      "type": "library",
      "publisher": "LLVM Packaging Team <pkg-llvm-team@lists.alioth.debian.org>",
      "name": "libedit2",
      "version": "3.1-20221030-2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libedit2:libedit2:3.1-20221030-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libedit2@3.1-20221030-2?arch=amd64&distro=debian-12.15&upstream=libedit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libedit2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libedit2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "258"
        },
        {
          "name": "syft:metadata:source",
          "value": "libedit"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=e42f4960873727f9&upstream=e2fsprogs%401.47.0-2",
      "type": "library",
      "publisher": "Theodore Y. Ts'o <tytso@mit.edu>",
      "name": "libext2fs2",
      "version": "1.47.0-2+b2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "Kazlib"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.47.0-2\\+b2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&upstream=e2fsprogs%401.47.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libext2fs2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libext2fs2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "535"
        },
        {
          "name": "syft:metadata:source",
          "value": "e2fsprogs"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.47.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libffi8@3.4.4-1?arch=amd64&distro=debian-12.15&package-id=3d64cbaa76084dc4&upstream=libffi",
      "type": "library",
      "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
      "name": "libffi8",
      "version": "3.4.4-1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libffi8:libffi8:3.4.4-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libffi8@3.4.4-1?arch=amd64&distro=debian-12.15&upstream=libffi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libffi8/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libffi8:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "68"
        },
        {
          "name": "syft:metadata:source",
          "value": "libffi"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libfido2-1@1.12.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=b647eb71de5e5955&upstream=libfido2%401.12.0-2",
      "type": "library",
      "publisher": "Debian Authentication Maintainers <pkg-auth-maintainers@lists.alioth.debian.org>",
      "name": "libfido2-1",
      "version": "1.12.0-2+b1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libfido2-1:libfido2-1:1.12.0-2\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libfido2-1@1.12.0-2%2Bb1?arch=amd64&distro=debian-12.15&upstream=libfido2%401.12.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libfido2-1:libfido2_1:1.12.0-2\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libfido2_1:libfido2-1:1.12.0-2\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libfido2_1:libfido2_1:1.12.0-2\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libfido2:libfido2-1:1.12.0-2\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libfido2:libfido2_1:1.12.0-2\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libfido2-1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libfido2-1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "241"
        },
        {
          "name": "syft:metadata:source",
          "value": "libfido2"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.12.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12",
      "type": "library",
      "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
      "name": "libgcc-s1",
      "version": "12.2.0-14+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&upstream=gcc-12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgcc-s1:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgcc_s1:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgcc_s1:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgcc:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgcc:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/gcc-12-base/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgcc-s1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "140"
        },
        {
          "name": "syft:metadata:source",
          "value": "gcc-12"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=df01c68aff59530a",
      "type": "library",
      "publisher": "Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>",
      "name": "libgcrypt20",
      "version": "1.10.1-3+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "sha256:95db2f9da663f2bfe2aabe9c72fce9d6c9ae767b912f397d7823f50bd55a1a7d"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.10.1-3\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libgcrypt20/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgcrypt20:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1592"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&package-id=4a42a38761bb84e0&upstream=gmp",
      "type": "library",
      "publisher": "Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>",
      "name": "libgmp10",
      "version": "2:6.2.1+dfsg1-1.1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg1-1.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&upstream=gmp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libgmp10/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgmp10:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "855"
        },
        {
          "name": "syft:metadata:source",
          "value": "gmp"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=amd64&distro=debian-12.15&package-id=d1631d475c37518a&upstream=gnutls28",
      "type": "library",
      "publisher": "Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>",
      "name": "libgnutls30",
      "version": "3.7.9-2+deb12u7",
      "licenses": [
        {
          "license": {
            "name": "sha256:bb7e5c24b3e27bbba5671dd710d159a0066833bda4caa1d55d8027ffed539337"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.9-2\\+deb12u7:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=amd64&distro=debian-12.15&upstream=gnutls28",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libgnutls30/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgnutls30:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "3396"
        },
        {
          "name": "syft:metadata:source",
          "value": "gnutls28"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64&distro=debian-12.15&package-id=bbf12da6801244e7&upstream=libgpg-error",
      "type": "library",
      "publisher": "Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>",
      "name": "libgpg-error0",
      "version": "1.46-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "name": "g10-permissive"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.46-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64&distro=debian-12.15&upstream=libgpg-error",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg-error0:libgpg_error0:1.46-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error0:libgpg-error0:1.46-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error0:libgpg_error0:1.46-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg-error0:1.46-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg_error0:1.46-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libgpg-error0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgpg-error0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "192"
        },
        {
          "name": "syft:metadata:source",
          "value": "libgpg-error"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=9db16cb04ae3b83d&upstream=krb5",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libgssapi-krb5-2",
      "version": "1.20.1-2+deb12u5",
      "licenses": [
        {
          "license": {
            "name": "sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libgssapi-krb5-2@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&upstream=krb5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libgssapi-krb5-2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "425"
        },
        {
          "name": "syft:metadata:source",
          "value": "krb5"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libhogweed6@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=244c6a089f6b6308&upstream=nettle",
      "type": "library",
      "publisher": "Magnus Holmgren <holmgren@debian.org>",
      "name": "libhogweed6",
      "version": "3.8.1-2",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "GAP"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libhogweed6:libhogweed6:3.8.1-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libhogweed6@3.8.1-2?arch=amd64&distro=debian-12.15&upstream=nettle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libhogweed6/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libhogweed6:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "463"
        },
        {
          "name": "syft:metadata:source",
          "value": "nettle"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=amd64&distro=debian-12.15&package-id=000ea285a5c77eab&upstream=libidn2%402.3.3-1",
      "type": "library",
      "publisher": "Debian Libidn team <help-libidn@gnu.org>",
      "name": "libidn2-0",
      "version": "2.3.3-1+b1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "name": "Unicode"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.3-1\\+b1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=amd64&distro=debian-12.15&upstream=libidn2%402.3.3-1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2-0:libidn2_0:2.3.3-1\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2_0:libidn2-0:2.3.3-1\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2_0:libidn2_0:2.3.3-1\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2:libidn2-0:2.3.3-1\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libidn2:libidn2_0:2.3.3-1\\+b1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libidn2-0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libidn2-0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "439"
        },
        {
          "name": "syft:metadata:source",
          "value": "libidn2"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "2.3.3-1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libk5crypto3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=fb1c9cf5b43a5af0&upstream=krb5",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libk5crypto3",
      "version": "1.20.1-2+deb12u5",
      "licenses": [
        {
          "license": {
            "name": "sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libk5crypto3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&upstream=krb5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libk5crypto3/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libk5crypto3:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "261"
        },
        {
          "name": "syft:metadata:source",
          "value": "krb5"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.3-2?arch=amd64&distro=debian-12.15&package-id=fbac937687c498c7&upstream=keyutils",
      "type": "library",
      "publisher": "Christian Kastner <ckk@debian.org>",
      "name": "libkeyutils1",
      "version": "1.6.3-2",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.3-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libkeyutils1@1.6.3-2?arch=amd64&distro=debian-12.15&upstream=keyutils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libkeyutils1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libkeyutils1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "40"
        },
        {
          "name": "syft:metadata:source",
          "value": "keyutils"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libkrb5-3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=52548f50c4ff26c7&upstream=krb5",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libkrb5-3",
      "version": "1.20.1-2+deb12u5",
      "licenses": [
        {
          "license": {
            "name": "sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libkrb5-3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&upstream=krb5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libkrb5-3:libkrb5_3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libkrb5_3:libkrb5-3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libkrb5_3:libkrb5_3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libkrb5:libkrb5-3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libkrb5:libkrb5_3:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libkrb5-3/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libkrb5-3:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1077"
        },
        {
          "name": "syft:metadata:source",
          "value": "krb5"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=309b5ab55a11c7d0&upstream=krb5",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libkrb5support0",
      "version": "1.20.1-2+deb12u5",
      "licenses": [
        {
          "license": {
            "name": "sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.20.1-2\\+deb12u5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&upstream=krb5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libkrb5support0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libkrb5support0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "134"
        },
        {
          "name": "syft:metadata:source",
          "value": "krb5"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64&distro=debian-12.15&package-id=7b6901adcac17545&upstream=lz4",
      "type": "library",
      "publisher": "Nobuhiro Iwamatsu <iwamatsu@debian.org>",
      "name": "liblz4-1",
      "version": "1.9.4-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.4-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64&distro=debian-12.15&upstream=lz4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:liblz4-1:liblz4_1:1.9.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:liblz4_1:liblz4-1:1.9.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:liblz4_1:liblz4_1:1.9.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:liblz4:liblz4-1:1.9.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:liblz4:liblz4_1:1.9.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/liblz4-1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/liblz4-1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "169"
        },
        {
          "name": "syft:metadata:source",
          "value": "lz4"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=b7ada9c36eced9fe&upstream=xz-utils",
      "type": "library",
      "publisher": "Sebastian Andrzej Siewior <sebastian@breakpoint.cc>",
      "name": "liblzma5",
      "version": "5.4.1-1+deb12u1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "name": "Autoconf"
          }
        },
        {
          "license": {
            "name": "PD"
          }
        },
        {
          "license": {
            "name": "PD-debian"
          }
        },
        {
          "license": {
            "name": "config-h"
          }
        },
        {
          "license": {
            "name": "noderivs"
          }
        },
        {
          "license": {
            "name": "permissive-fsf"
          }
        },
        {
          "license": {
            "name": "permissive-nowarranty"
          }
        },
        {
          "license": {
            "name": "probably-PD"
          }
        }
      ],
      "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.4.1-1\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&upstream=xz-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/liblzma5/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/liblzma5:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "333"
        },
        {
          "name": "syft:metadata:source",
          "value": "xz-utils"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64&distro=debian-12.15&package-id=f7a02d5b69549304&upstream=libmd",
      "type": "library",
      "publisher": "Guillem Jover <guillem@debian.org>",
      "name": "libmd0",
      "version": "1.0.4-2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-Aaron-D-Gifford"
          }
        },
        {
          "license": {
            "name": "public-domain-md4"
          }
        },
        {
          "license": {
            "name": "public-domain-md5"
          }
        },
        {
          "license": {
            "name": "public-domain-sha1"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libmd0:libmd0:1.0.4-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64&distro=debian-12.15&upstream=libmd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libmd0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libmd0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "79"
        },
        {
          "name": "syft:metadata:source",
          "value": "libmd"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=3578a81ebb651f3d&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "libmount1",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libmount1:libmount1:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libmount1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libmount1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "454"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=1ac1c6a69a1bbe8a&upstream=nettle",
      "type": "library",
      "publisher": "Magnus Holmgren <holmgren@debian.org>",
      "name": "libnettle8",
      "version": "3.8.1-2",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "GAP"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnettle8:libnettle8:3.8.1-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64&distro=debian-12.15&upstream=nettle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libnettle8/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libnettle8:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "520"
        },
        {
          "name": "syft:metadata:source",
          "value": "nettle"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmaccess@9.0.0?package-id=fa12cf8926842c47",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmaccess",
      "version": "9.0.0",
      "description": "programmatic library for `npm access` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:9.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmaccess@9.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmaccess",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmdiff@7.0.5?package-id=e1df9cb9f109d9b8",
      "type": "library",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmdiff",
      "version": "7.0.5",
      "description": "The registry diff",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:7.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmdiff@7.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmexec@9.0.5?package-id=209197cff71ca56f",
      "type": "library",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmexec",
      "version": "9.0.5",
      "description": "npm exec (npx) programmatic API",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:9.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmexec@9.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmfund@6.0.5?package-id=acdc49147bda1f98",
      "type": "library",
      "author": "GitHub Inc., Ruy Adorno (https://ruyadorno.com)",
      "name": "libnpmfund",
      "version": "6.0.5",
      "description": "Programmatic API for npm fund",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:6.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmfund@6.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmhook@11.0.0?package-id=af980fdbd567b94f",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmhook",
      "version": "11.0.0",
      "description": "programmatic API for managing npm registry hooks",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:11.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmhook@11.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmhook/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmorg@7.0.0?package-id=48298d9f1f4cbd8a",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmorg",
      "version": "7.0.0",
      "description": "Programmatic api for `npm org` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmorg@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmorg",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmpack@8.0.5?package-id=695a98d914c6f28d",
      "type": "library",
      "author": "GitHub Inc., Claudia Hernández <claudia@npmjs.com>",
      "name": "libnpmpack",
      "version": "8.0.5",
      "description": "Programmatic API for the bits behind npm pack",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:8.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmpack@8.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmpack",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmpublish@10.0.2?package-id=9039a5b4a04dfe18",
      "type": "library",
      "author": "GitHub Inc., Kat Marchán <kzm@zkat.tech>, Claudia Hernández <claudia@npmjs.com>",
      "name": "libnpmpublish",
      "version": "10.0.2",
      "description": "Programmatic API for the bits behind npm publish and unpublish",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:10.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmpublish@10.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmpublish",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmsearch@8.0.0?package-id=15f9f1e5e6b57e1f",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmsearch",
      "version": "8.0.0",
      "description": "Programmatic API for searching in npm and compatible registries.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmsearch@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmsearch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmteam@7.0.0?package-id=cd41734843fcd83a",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmteam",
      "version": "7.0.0",
      "description": "npm Team management APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmteam@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://npmjs.com/package/libnpmteam",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libnpmversion@7.0.0?package-id=9ce7fbc762306b5a",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "libnpmversion",
      "version": "7.0.0",
      "description": "library to do the things that 'npm version' does",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libnpmversion@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=amd64&distro=debian-12.15&package-id=0027543880aaec84&upstream=p11-kit",
      "type": "library",
      "publisher": "Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>",
      "name": "libp11-kit0",
      "version": "0.24.1-2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "name": "ISC+IBM"
          }
        },
        {
          "license": {
            "name": "permissive-like-automake-output"
          }
        },
        {
          "license": {
            "name": "same-as-rest-of-p11kit"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.24.1-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=amd64&distro=debian-12.15&upstream=p11-kit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libp11-kit0:libp11_kit0:0.24.1-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libp11_kit0:libp11-kit0:0.24.1-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libp11_kit0:libp11_kit0:0.24.1-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libp11:libp11-kit0:0.24.1-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libp11:libp11_kit0:0.24.1-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libp11-kit0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libp11-kit0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1408"
        },
        {
          "name": "syft:metadata:source",
          "value": "p11-kit"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=4cab7ef7de016d31&upstream=pam",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libpam-modules",
      "version": "1.5.2-6+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "BSD-tcp_wrappers"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam-modules:libpam_modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules:libpam-modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules:libpam_modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam-modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam_modules:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libpam-modules/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libpam-modules:amd64.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libpam-modules:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1031"
        },
        {
          "name": "syft:metadata:source",
          "value": "pam"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=372dffabd059479c&upstream=pam",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libpam-modules-bin",
      "version": "1.5.2-6+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "BSD-tcp_wrappers"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam-modules:libpam-modules-bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam-modules:libpam_modules_bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules:libpam-modules-bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_modules:libpam_modules_bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam-modules-bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam_modules_bin:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libpam-modules-bin/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libpam-modules-bin.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libpam-modules-bin.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "227"
        },
        {
          "name": "syft:metadata:source",
          "value": "pam"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all&distro=debian-12.15&package-id=ca1034d5d24bcf54&upstream=pam",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libpam-runtime",
      "version": "1.5.2-6+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "BSD-tcp_wrappers"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all&distro=debian-12.15&upstream=pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam-runtime:libpam_runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_runtime:libpam-runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam_runtime:libpam_runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam-runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpam:libpam_runtime:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libpam-runtime/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.prerm"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/libpam-runtime.templates"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "876"
        },
        {
          "name": "syft:metadata:source",
          "value": "pam"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
      "type": "library",
      "publisher": "Sam Hartman <hartmans@debian.org>",
      "name": "libpam0g",
      "version": "1.5.2-6+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Beerware"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "BSD-tcp_wrappers"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.5.2-6\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libpam0g/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libpam0g:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "215"
        },
        {
          "name": "syft:metadata:source",
          "value": "pam"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12.15&package-id=fdd1d61b217ae9fe&upstream=pcre2",
      "type": "library",
      "publisher": "Matthew Vernon <matthew@debian.org>",
      "name": "libpcre2-8-0",
      "version": "10.42-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-Cambridge"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.42-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12.15&upstream=pcre2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2:libpcre2-8-0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libpcre2:libpcre2_8_0:10.42-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libpcre2-8-0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "685"
        },
        {
          "name": "syft:metadata:source",
          "value": "pcre2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=864deba87ee227ff&upstream=libseccomp",
      "type": "library",
      "publisher": "Kees Cook <kees@debian.org>",
      "name": "libseccomp2",
      "version": "2.5.4-1+deb12u1",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.4-1\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&upstream=libseccomp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libseccomp2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libseccomp2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "148"
        },
        {
          "name": "syft:metadata:source",
          "value": "libseccomp"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
      "type": "library",
      "publisher": "Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>",
      "name": "libselinux1",
      "version": "3.4-1+b6",
      "licenses": [
        {
          "license": {
            "name": "sha256:641806738b0c6a3d03168c2649e6b94205198bb66cd557e6bae3a20b71c9bb0b"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.4-1\\+b6:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&upstream=libselinux%403.4-1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libselinux1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libselinux1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "199"
        },
        {
          "name": "syft:metadata:source",
          "value": "libselinux"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "3.4-1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libsemanage-common@3.4-1?arch=all&distro=debian-12.15&package-id=4a9257795fc45897&upstream=libsemanage",
      "type": "library",
      "publisher": "Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>",
      "name": "libsemanage-common",
      "version": "3.4-1",
      "licenses": [
        {
          "license": {
            "name": "sha256:e00e6a86c598f9e24ced0180a70a5f2f2e45e133d93adf2b17ce8a06ce4b1b51"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.4-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libsemanage-common@3.4-1?arch=all&distro=debian-12.15&upstream=libsemanage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libsemanage-common:libsemanage_common:3.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libsemanage_common:libsemanage-common:3.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libsemanage_common:libsemanage_common:3.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libsemanage:libsemanage-common:3.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libsemanage:libsemanage_common:3.4-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libsemanage-common/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libsemanage-common.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/libsemanage-common.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/libsemanage-common.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "37"
        },
        {
          "name": "syft:metadata:source",
          "value": "libsemanage"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=amd64&distro=debian-12.15&package-id=3e495c97375273f7&upstream=libsemanage%403.4-1",
      "type": "library",
      "publisher": "Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>",
      "name": "libsemanage2",
      "version": "3.4-1+b5",
      "licenses": [
        {
          "license": {
            "name": "sha256:e00e6a86c598f9e24ced0180a70a5f2f2e45e133d93adf2b17ce8a06ce4b1b51"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsemanage2:libsemanage2:3.4-1\\+b5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=amd64&distro=debian-12.15&upstream=libsemanage%403.4-1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libsemanage2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libsemanage2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "297"
        },
        {
          "name": "syft:metadata:source",
          "value": "libsemanage"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "3.4-1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libsepol2@3.4-2.1?arch=amd64&distro=debian-12.15&package-id=ef742c3346e74452&upstream=libsepol",
      "type": "library",
      "publisher": "Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>",
      "name": "libsepol2",
      "version": "3.4-2.1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsepol2:libsepol2:3.4-2.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libsepol2@3.4-2.1?arch=amd64&distro=debian-12.15&upstream=libsepol",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libsepol2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libsepol2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "775"
        },
        {
          "name": "syft:metadata:source",
          "value": "libsepol"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=ecee94562f1ce06f&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "libsmartcols1",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libsmartcols1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libsmartcols1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "289"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=1604e864b4a343b7&upstream=e2fsprogs%401.47.0-2",
      "type": "library",
      "publisher": "Theodore Y. Ts'o <tytso@mit.edu>",
      "name": "libss2",
      "version": "1.47.0-2+b2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "Kazlib"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libss2:libss2:1.47.0-2\\+b2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&upstream=e2fsprogs%401.47.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libss2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libss2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "71"
        },
        {
          "name": "syft:metadata:source",
          "value": "e2fsprogs"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.47.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=f55823b1f5c2e201&upstream=openssl",
      "type": "library",
      "publisher": "Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>",
      "name": "libssl3",
      "version": "3.0.20-1~deb12u2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-or-later"
          }
        },
        {
          "license": {
            "name": "Artistic"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.20-1\\~deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&upstream=openssl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libssl3/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libssl3:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "6030"
        },
        {
          "name": "syft:metadata:source",
          "value": "openssl"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=c2f4fec51904a8ce&upstream=gcc-12",
      "type": "library",
      "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
      "name": "libstdc++6",
      "version": "12.2.0-14+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&upstream=gcc-12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/gcc-12-base/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libstdc++6:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2686"
        },
        {
          "name": "syft:metadata:source",
          "value": "gcc-12"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd",
      "type": "library",
      "publisher": "Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>",
      "name": "libsystemd0",
      "version": "252.39-1~deb12u2",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:252.39-1\\~deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&upstream=systemd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libsystemd0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "909"
        },
        {
          "name": "syft:metadata:source",
          "value": "systemd"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9e40126b989ece04",
      "type": "library",
      "publisher": "Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>",
      "name": "libtasn1-6",
      "version": "4.19.0-2+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "sha256:572ad60ad184d8f52c6dc66d83a61a68f137db560b3452ce00588c9ecf128a65"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libtasn1-6:libtasn1_6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libtasn1_6:libtasn1-6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libtasn1_6:libtasn1_6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libtasn1:libtasn1-6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libtasn1:libtasn1_6:4.19.0-2\\+deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libtasn1-6/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libtasn1-6:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "116"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses",
      "type": "library",
      "publisher": "Craig Small <csmall@debian.org>",
      "name": "libtinfo6",
      "version": "6.4-4",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.4-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&upstream=ncurses",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libtinfo6/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libtinfo6:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "541"
        },
        {
          "name": "syft:metadata:source",
          "value": "ncurses"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=55089f35a6363c37&upstream=systemd",
      "type": "library",
      "publisher": "Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>",
      "name": "libudev1",
      "version": "252.39-1~deb12u2",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libudev1:libudev1:252.39-1\\~deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&upstream=systemd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libudev1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libudev1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "240"
        },
        {
          "name": "syft:metadata:source",
          "value": "systemd"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libunistring2@1.0-2?arch=amd64&distro=debian-12.15&package-id=f167882223735de0&upstream=libunistring",
      "type": "library",
      "publisher": "Jörg Frings-Fürst <debian@jff.email>",
      "name": "libunistring2",
      "version": "1.0-2",
      "licenses": [
        {
          "license": {
            "id": "GFDL-1.2-only"
          }
        },
        {
          "license": {
            "id": "GFDL-1.2-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "FreeSoftware"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libunistring2:libunistring2:1.0-2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libunistring2@1.0-2?arch=amd64&distro=debian-12.15&upstream=libunistring",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libunistring2/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libunistring2:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "1807"
        },
        {
          "name": "syft:metadata:source",
          "value": "libunistring"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=2049f4c13963925a&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "libuuid1",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libuuid1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libuuid1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "79"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/libxmljs2@0.37.0?package-id=4365428d6e5eb5c5",
      "type": "library",
      "author": "marudor, Jeff Smick, Marco Rogers",
      "name": "libxmljs2",
      "version": "0.37.0",
      "description": "libxml bindings for v8 javascript engine",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libxmljs2:libxmljs2:0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/libxmljs2@0.37.0",
      "externalReferences": [
        {
          "url": "http://github.com/marudor/libxmljs2.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:marudor:libxmljs2:0.37.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/libxmljs2@0.37.0/node_modules/libxmljs2/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libxxhash0@0.8.1-1?arch=amd64&distro=debian-12.15&package-id=662454f7c4742a97&upstream=xxhash",
      "type": "library",
      "publisher": "Josue Ortega <josue@debian.org>",
      "name": "libxxhash0",
      "version": "0.8.1-1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.1-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libxxhash0@0.8.1-1?arch=amd64&distro=debian-12.15&upstream=xxhash",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libxxhash0/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libxxhash0:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "99"
        },
        {
          "name": "syft:metadata:source",
          "value": "xxhash"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&package-id=7cc55da81007017d&upstream=libzstd",
      "type": "library",
      "publisher": "RPM packaging team <team+pkg-rpm@tracker.debian.org>",
      "name": "libzstd1",
      "version": "1.5.4+dfsg2-5",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Zlib"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        }
      ],
      "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.5.4\\+dfsg2-5:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&upstream=libzstd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/libzstd1/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/libzstd1:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "785"
        },
        {
          "name": "syft:metadata:source",
          "value": "libzstd"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lie@3.3.0?package-id=07866cbe7816cadd",
      "type": "library",
      "name": "lie",
      "version": "3.3.0",
      "description": "A basic but performant promise implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:calvinmetcalf:lie:3.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lie@3.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/calvinmetcalf/lie.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lie:lie:3.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lie@3.3.0/node_modules/lie/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lightningcss@1.30.1?package-id=65005674896c870c",
      "type": "library",
      "name": "lightningcss",
      "version": "1.30.1",
      "description": "A CSS parser, transformer, and minifier written in Rust",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parcel-bundler:lightningcss:1.30.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lightningcss@1.30.1",
      "externalReferences": [
        {
          "url": "https://github.com/parcel-bundler/lightningcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss:lightningcss:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lightningcss@1.30.1/node_modules/lightningcss/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lightningcss-linux-x64-gnu@1.30.1?package-id=1c6fa02d1cc1ba02",
      "type": "library",
      "name": "lightningcss-linux-x64-gnu",
      "version": "1.30.1",
      "description": "A CSS parser, transformer, and minifier written in Rust",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lightningcss-linux-x64-gnu:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.30.1",
      "externalReferences": [
        {
          "url": "https://github.com/parcel-bundler/lightningcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64-gnu:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64_gnu:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64_gnu:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parcel-bundler:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parcel-bundler:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss:lightningcss-linux-x64-gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss:lightningcss_linux_x64_gnu:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lightningcss-linux-x64-gnu@1.30.1/node_modules/lightningcss-linux-x64-gnu/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lightningcss-linux-x64-musl@1.30.1?package-id=ccef9a4a093fb099",
      "type": "library",
      "name": "lightningcss-linux-x64-musl",
      "version": "1.30.1",
      "description": "A CSS parser, transformer, and minifier written in Rust",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lightningcss-linux-x64-musl:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lightningcss-linux-x64-musl@1.30.1",
      "externalReferences": [
        {
          "url": "https://github.com/parcel-bundler/lightningcss.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64-musl:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64_musl:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64_musl:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux-x64:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux_x64:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss-linux:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss_linux:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parcel-bundler:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parcel-bundler:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss:lightningcss-linux-x64-musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lightningcss:lightningcss_linux_x64_musl:1.30.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lightningcss-linux-x64-musl@1.30.1/node_modules/lightningcss-linux-x64-musl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?package-id=ea1b83ce2ec14090",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "cpe": "cpe:2.3:a:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b421526c5f297295adef1c886e5246c39d4ac629"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:listenablefuture:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "listenablefuture"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.guava.listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/listenercount@1.0.1?package-id=a0d639cecbdf144a",
      "type": "library",
      "author": "jden <jason@denizac.org>",
      "name": "listenercount",
      "version": "1.0.1",
      "description": "backwards compatible version of builtin events.listenercount",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/listenercount@1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/listenercount@1.0.1/node_modules/listenercount/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/local-pkg@1.1.2?package-id=53ce5c12c60245d7",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "local-pkg",
      "version": "1.1.2",
      "description": "Get information on local packages.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:antfu-collective:local-pkg:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/local-pkg@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/antfu-collective/local-pkg.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antfu-collective/local-pkg#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antfu-collective:local_pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local-pkg:local-pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local-pkg:local_pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local_pkg:local-pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local_pkg:local_pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local:local-pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:local:local_pkg:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/local-pkg@1.1.2/node_modules/local-pkg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash@4.17.21?package-id=9cec31f432957261",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com>, John-David Dalton <john.david.dalton@gmail.com>, Mathias Bynens <mathias@qiwi.be>",
      "name": "lodash",
      "version": "4.17.21",
      "description": "Lodash modular utilities.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash-es@4.17.21?package-id=d9bf31882853bc59",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com>, John-David Dalton <john.david.dalton@gmail.com>, Mathias Bynens <mathias@qiwi.be>",
      "name": "lodash-es",
      "version": "4.17.21",
      "description": "Lodash exported as ES modules.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash:lodash-es:4.17.21:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lodash-es@4.17.21",
      "externalReferences": [
        {
          "url": "https://lodash.com/custom-builds",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0?package-id=2391a91324bfb089",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "description": "The lodash method `_.camelCase` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.camelcase:lodash.camelcase:4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.camelcase@4.3.0/node_modules/lodash.camelcase/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0?package-id=3d5cc14fda104c29",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "description": "The lodash method `_.defaults` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.defaults:lodash.defaults:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.defaults@4.2.0/node_modules/lodash.defaults/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.difference@4.5.0?package-id=0037175aad0f0420",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.difference",
      "version": "4.5.0",
      "description": "The lodash method `_.difference` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.difference:lodash.difference:4.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.difference@4.5.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.difference@4.5.0/node_modules/lodash.difference/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.escaperegexp@4.1.2?package-id=e431442980c61f48",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.escaperegexp",
      "version": "4.1.2",
      "description": "The lodash method `_.escapeRegExp` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.escaperegexp:lodash.escaperegexp:4.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.escaperegexp@4.1.2",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.escaperegexp@4.1.2/node_modules/lodash.escaperegexp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.flatten@4.4.0?package-id=edbe4a0b4d9d4c00",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.flatten",
      "version": "4.4.0",
      "description": "The lodash method `_.flatten` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.flatten:lodash.flatten:4.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.flatten@4.4.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.flatten@4.4.0/node_modules/lodash.flatten/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.groupby@4.6.0?package-id=031002f82775ca14",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.groupby",
      "version": "4.6.0",
      "description": "The lodash method `_.groupBy` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.groupby:lodash.groupby:4.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.groupby@4.6.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.groupby@4.6.0/node_modules/lodash.groupby/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isboolean@3.0.3?package-id=0f620bf743638e5e",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine@iceddev.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isboolean",
      "version": "3.0.3",
      "description": "The lodash method `_.isBoolean` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isboolean@3.0.3",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isboolean@3.0.3/node_modules/lodash.isboolean/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isequal@4.5.0?package-id=6a31078c7b0f3332",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isequal",
      "version": "4.5.0",
      "description": "The Lodash method `_.isEqual` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isequal:lodash.isequal:4.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isequal@4.5.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isequal@4.5.0/node_modules/lodash.isequal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isfunction@3.0.9?package-id=4c2c62d5dcf66b55",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isfunction",
      "version": "3.0.9",
      "description": "The Lodash method `_.isFunction` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isfunction:lodash.isfunction:3.0.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isfunction@3.0.9",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isfunction@3.0.9/node_modules/lodash.isfunction/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isnil@4.0.0?package-id=19288f74e4eb6824",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine@iceddev.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isnil",
      "version": "4.0.0",
      "description": "The lodash method `_.isNil` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isnil:lodash.isnil:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isnil@4.0.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isnil@4.0.0/node_modules/lodash.isnil/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6?package-id=2c1f8f25241ecc3b",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "description": "The lodash method `_.isPlainObject` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isplainobject@4.0.6/node_modules/lodash.isplainobject/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.isundefined@3.0.1?package-id=307eb991f886e3e3",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Benjamin Tan <demoneaux@gmail.com> (https://d10.github.io/), Blaine Bublitz <blaine@iceddev.com> (http://www.iceddev.com/), Kit Cambridge <github@kitcambridge.be> (http://kitcambridge.be/), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.isundefined",
      "version": "3.0.1",
      "description": "The modern build of lodash’s `_.isUndefined` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.isundefined:lodash.isundefined:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.isundefined@3.0.1",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.isundefined@3.0.1/node_modules/lodash.isundefined/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.union@4.6.0?package-id=72ba8247e924bada",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.union",
      "version": "4.6.0",
      "description": "The lodash method `_.union` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.union:lodash.union:4.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.union@4.6.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.union@4.6.0/node_modules/lodash.union/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lodash.uniq@4.5.0?package-id=6aac8ea8f10269d9",
      "type": "library",
      "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
      "name": "lodash.uniq",
      "version": "4.5.0",
      "description": "The lodash method `_.uniq` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lodash.uniq:lodash.uniq:4.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lodash.uniq@4.5.0",
      "externalReferences": [
        {
          "url": "https://lodash.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lodash.uniq@4.5.0/node_modules/lodash.uniq/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/login@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=d5e0daed57b0ef5c&upstream=shadow",
      "type": "library",
      "publisher": "Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org>",
      "name": "login",
      "version": "1:4.13+dfsg1-1+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:login:login:1\\:4.13\\+dfsg1-1\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/login@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=shadow",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/login/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/login.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/login.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/login.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/login.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/login.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/login.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/login.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2550"
        },
        {
          "name": "syft:metadata:source",
          "value": "shadow"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=db69887a7e4088b2&upstream=e2fsprogs%401.47.0-2",
      "type": "library",
      "publisher": "Theodore Y. Ts'o <tytso@mit.edu>",
      "name": "logsave",
      "version": "1.47.0-2+b2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "Kazlib"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "Latex2e"
          }
        },
        {
          "license": {
            "name": "GPL"
          }
        }
      ],
      "cpe": "cpe:2.3:a:logsave:logsave:1.47.0-2\\+b2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&upstream=e2fsprogs%401.47.0-2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/logsave/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/logsave.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/logsave.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "50"
        },
        {
          "name": "syft:metadata:source",
          "value": "e2fsprogs"
        },
        {
          "name": "syft:metadata:sourceVersion",
          "value": "1.47.0-2"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/lombok/lombok@1.18.46?package-id=c0a30a5f3780897e",
      "type": "library",
      "name": "lombok",
      "version": "1.18.46",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lombok:lombok:1.18.46:*:*:*:*:*:*:*",
      "purl": "pkg:maven/lombok/lombok@1.18.46",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a5cfe99fdf320e84955ef653f2ce1bf789d11385"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.projectlombok.lombok-1.18.46.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.projectlombok.lombok-1.18.46.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/long@5.3.2?package-id=9189d7127b9f4ae7",
      "type": "library",
      "author": "Daniel Wirtz <dcode@dcode.io>",
      "name": "long",
      "version": "5.3.2",
      "description": "A Long class for representing a 64-bit two's-complement integer value.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:dcodeIO:long:5.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/long@5.3.2",
      "externalReferences": [
        {
          "url": "https://github.com/dcodeIO/long.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:long:long:5.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/long@5.3.2/node_modules/long/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/longest-streak@3.1.0?package-id=1656ecd61ef4f294",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "longest-streak",
      "version": "3.1.0",
      "description": "Count the longest repeating streak of a substring",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:longest-streak:longest-streak:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/longest-streak@3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:longest-streak:longest_streak:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:longest_streak:longest-streak:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:longest_streak:longest_streak:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:longest:longest-streak:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:longest:longest_streak:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/longest-streak@3.1.0/node_modules/longest-streak/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=afaf1492aedb186b",
      "type": "library",
      "author": "Andres Suarez <zertosh@gmail.com>",
      "name": "loose-envify",
      "version": "1.4.0",
      "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/zertosh/loose-envify.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/zertosh/loose-envify",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/loose-envify@1.4.0/node_modules/loose-envify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/loupe@3.2.1?package-id=5b295328645c1733",
      "type": "library",
      "author": "Veselin Todorov <hi@vesln.com>, Keith Cirkel (https://github.com/keithamus)",
      "name": "loupe",
      "version": "3.2.1",
      "description": "Inspect utility for Node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chaijs:loupe:3.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/loupe@3.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/chaijs/loupe",
          "type": "distribution"
        },
        {
          "url": "https://github.com/chaijs/loupe",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:loupe:loupe:3.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/loupe@3.2.1/node_modules/loupe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lru-cache@10.4.3?package-id=a4d7b4923816968f",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lru-cache@10.4.3/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lru-cache@10.4.3?package-id=9e695e6608f09d08",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lru-cache@10.4.3?package-id=319b624f10737cbd",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lru-cache@11.5.2?package-id=b276ed8dc79a3ac8",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "11.5.2",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:11.5.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@11.5.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lru-cache@11.5.2/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lru-cache@5.1.1?package-id=56ccab5c0c640cf9",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me>",
      "name": "lru-cache",
      "version": "5.1.1",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:lru-cache:5.1.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/lru-cache@5.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lru-cache@5.1.1/node_modules/lru-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lucide-react@0.453.0?package-id=a711bcf9559a5999",
      "type": "library",
      "author": "Eric Fennis",
      "name": "lucide-react",
      "version": "0.453.0",
      "description": "A Lucide icon library package for React applications",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lucide-icons:lucide-react:0.453.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lucide-react@0.453.0",
      "externalReferences": [
        {
          "url": "https://github.com/lucide-icons/lucide.git",
          "type": "distribution"
        },
        {
          "url": "https://lucide.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-icons:lucide_react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-react:lucide-react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-react:lucide_react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide_react:lucide-react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide_react:lucide_react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide:lucide-react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide:lucide_react:0.453.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lucide-react@0.453.0_react@19.2.1/node_modules/lucide-react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/lucide-react@0.542.0?package-id=a13c58b4f889e06e",
      "type": "library",
      "author": "Eric Fennis",
      "name": "lucide-react",
      "version": "0.542.0",
      "description": "A Lucide icon library package for React applications.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lucide-icons:lucide-react:0.542.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/lucide-react@0.542.0",
      "externalReferences": [
        {
          "url": "https://github.com/lucide-icons/lucide.git",
          "type": "distribution"
        },
        {
          "url": "https://lucide.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-icons:lucide_react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-react:lucide-react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide-react:lucide_react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide_react:lucide-react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide_react:lucide_react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide:lucide-react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lucide:lucide_react:0.542.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/lucide-react@0.542.0_react@19.2.1/node_modules/lucide-react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/magic-string@0.30.19?package-id=47099e7107bfa2cd",
      "type": "library",
      "author": "Rich Harris",
      "name": "magic-string",
      "version": "0.30.19",
      "description": "Modify strings, generate sourcemaps",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:magic-string:magic-string:0.30.19:*:*:*:*:*:*:*",
      "purl": "pkg:npm/magic-string@0.30.19",
      "externalReferences": [
        {
          "url": "https://github.com/rich-harris/magic-string.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:magic-string:magic_string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:magic_string:magic-string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:magic_string:magic_string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rich-harris:magic-string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rich-harris:magic_string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:magic:magic-string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:magic:magic_string:0.30.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/magic-string@0.30.19/node_modules/magic-string/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/make-fetch-happen@14.0.3?package-id=e09626161b060dc5",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "make-fetch-happen",
      "version": "14.0.3",
      "description": "Opinionated, caching, retrying fetch client",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/make-fetch-happen@14.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/make-fetch-happen.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/make-fetch-happen@14.0.3/node_modules/make-fetch-happen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/make-fetch-happen@14.0.3?package-id=fa8ffc3e30a77a45",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "make-fetch-happen",
      "version": "14.0.3",
      "description": "Opinionated, caching, retrying fetch client",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/make-fetch-happen@14.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/make-fetch-happen.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/make-fetch-happen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/make-fetch-happen@14.0.3?package-id=1e6b4949c3cc6569",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "make-fetch-happen",
      "version": "14.0.3",
      "description": "Opinionated, caching, retrying fetch client",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/make-fetch-happen@14.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/make-fetch-happen.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/markdown-table@3.0.4?package-id=9b421e4352f67620",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "markdown-table",
      "version": "3.0.4",
      "description": "Generate a markdown (GFM) table",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:markdown-table:markdown-table:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/markdown-table@3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:markdown-table:markdown_table:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:markdown_table:markdown-table:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:markdown_table:markdown_table:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:markdown:markdown-table:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:markdown:markdown_table:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/markdown-table@3.0.4/node_modules/markdown-table/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/marked@16.4.1?package-id=f3def9641ccdbd43",
      "type": "library",
      "author": "Christopher Jeffrey",
      "name": "marked",
      "version": "16.4.1",
      "description": "A markdown parser built for speed",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:marked_project:marked:16.4.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/marked@16.4.1",
      "externalReferences": [
        {
          "url": "git://github.com/markedjs/marked.git",
          "type": "distribution"
        },
        {
          "url": "https://marked.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/marked@16.4.1/node_modules/marked/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0?package-id=84fb0ff2e1899fad",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/math-intrinsics.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/es-shims/math-intrinsics#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:es-shims:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/mavenEcjBootstrapAgent/mavenEcjBootstrapAgent?package-id=f3744fc6176ab878",
      "type": "library",
      "name": "mavenEcjBootstrapAgent",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:mavenEcjBootstrapAgent:mavenEcjBootstrapAgent:*:*:*:*:*:*:*:*",
      "purl": "pkg:maven/mavenEcjBootstrapAgent/mavenEcjBootstrapAgent",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b03ce7b33d535b42e4a84e106c3647760eb8769"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.projectlombok.lombok-1.18.46.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.projectlombok.lombok-1.18.46.jar:lombok/launch/mavenEcjBootstrapAgent.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=amd64&distro=debian-12.15&package-id=81ae31ac445c7dbb",
      "type": "library",
      "publisher": "Boyuan Yang <byang@debian.org>",
      "name": "mawk",
      "version": "1.3.4.20200120-3.1",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-3.1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/mawk/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/mawk.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/mawk.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/mawk.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/mawk.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "263"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-find-and-replace@3.0.2?package-id=85d16f805aa99cfb",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-find-and-replace",
      "version": "3.0.2",
      "description": "mdast utility to find and replace text in a tree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-find-and-replace:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-find-and-replace@3.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-find-and-replace:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find_and_replace:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find_and_replace:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-find-and:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-find-and:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find_and:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find_and:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-find:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-find:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_find:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-find-and-replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_find_and_replace:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-find-and-replace@3.0.2/node_modules/mdast-util-find-and-replace/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-from-markdown@2.0.2?package-id=55f321af2fadff1b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-from-markdown",
      "version": "2.0.2",
      "description": "mdast utility to parse markdown",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-from-markdown:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-from-markdown@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-from-markdown:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_from_markdown:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_from_markdown:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-from:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-from:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_from:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_from:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-from-markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_from_markdown:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-from-markdown@2.0.2/node_modules/mdast-util-from-markdown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm@3.1.0?package-id=8974cb3b069aa843",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm",
      "version": "3.1.0",
      "description": "mdast extension to parse and serialize GFM (GitHub Flavored Markdown)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm@3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm@3.1.0/node_modules/mdast-util-gfm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm-autolink-literal@2.0.1?package-id=887f31fb9761ceef",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm-autolink-literal",
      "version": "2.0.1",
      "description": "mdast extension to parse and serialize GFM autolink literals",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm-autolink-literal:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm-autolink-literal@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-autolink-literal:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_autolink_literal:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_autolink_literal:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-autolink:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-autolink:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_autolink:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_autolink:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm-autolink-literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm_autolink_literal:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm-autolink-literal@2.0.1/node_modules/mdast-util-gfm-autolink-literal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm-footnote@2.1.0?package-id=7e607c098b3434be",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm-footnote",
      "version": "2.1.0",
      "description": "mdast extension to parse and serialize GFM footnotes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm-footnote:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm-footnote@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-footnote:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_footnote:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_footnote:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm-footnote@2.1.0/node_modules/mdast-util-gfm-footnote/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm-strikethrough@2.0.0?package-id=ff14a2db4151e207",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm-strikethrough",
      "version": "2.0.0",
      "description": "mdast extension to parse and serialize GFM strikethrough",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm-strikethrough:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm-strikethrough@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-strikethrough:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_strikethrough:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_strikethrough:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm-strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm_strikethrough:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm-strikethrough@2.0.0/node_modules/mdast-util-gfm-strikethrough/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm-table@2.0.0?package-id=7b937fd490497f59",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm-table",
      "version": "2.0.0",
      "description": "mdast extension to parse and serialize GFM tables",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm-table:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm-table@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-table:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_table:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_table:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm-table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm_table:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm-table@2.0.0/node_modules/mdast-util-gfm-table/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-gfm-task-list-item@2.0.0?package-id=e3ea6ca324449835",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-gfm-task-list-item",
      "version": "2.0.0",
      "description": "mdast extension to parse and serialize GFM task list items",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-gfm-task-list-item:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-gfm-task-list-item@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-task-list-item:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task_list_item:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task_list_item:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-task-list:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-task-list:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task_list:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task_list:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-task:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm-task:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm_task:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-gfm:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_gfm:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-gfm-task-list-item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_gfm_task_list_item:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-gfm-task-list-item@2.0.0/node_modules/mdast-util-gfm-task-list-item/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-math@3.0.0?package-id=99b2c80425a71a81",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-math",
      "version": "3.0.0",
      "description": "mdast extension to parse and serialize math",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-math:mdast-util-math:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-math@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-math:mdast_util_math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_math:mdast-util-math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_math:mdast_util_math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_math:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-math@3.0.0/node_modules/mdast-util-math/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-mdx-expression@2.0.1?package-id=4b940561bba38c69",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-mdx-expression",
      "version": "2.0.1",
      "description": "mdast extension to parse and serialize MDX (or MDX.js) expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-mdx-expression:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-mdx-expression@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx-expression:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx_expression:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx_expression:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-mdx-expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_mdx_expression:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-mdx-expression@2.0.1/node_modules/mdast-util-mdx-expression/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-mdx-jsx@3.2.0?package-id=972325a29b6fbec0",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-mdx-jsx",
      "version": "3.2.0",
      "description": "mdast extension to parse and serialize MDX or MDX.js JSX",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-mdx-jsx:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-mdx-jsx@3.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx-jsx:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx_jsx:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx_jsx:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdx:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdx:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-mdx-jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_mdx_jsx:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-mdx-jsx@3.2.0/node_modules/mdast-util-mdx-jsx/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-mdxjs-esm@2.0.1?package-id=cbd62ee28bbd8ad7",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-mdxjs-esm",
      "version": "2.0.1",
      "description": "mdast extension to parse and serialize MDX.js ESM (import/exports)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-mdxjs-esm:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-mdxjs-esm@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdxjs-esm:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdxjs_esm:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdxjs_esm:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdxjs:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-mdxjs:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdxjs:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_mdxjs:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-mdxjs-esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_mdxjs_esm:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-mdxjs-esm@2.0.1/node_modules/mdast-util-mdxjs-esm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-phrasing@4.1.0?package-id=a60576dca3b4248c",
      "type": "library",
      "author": "Victor Felder <victor@draft.li> (https://draft.li), Victor Felder <victor@draft.li> (https://draft.li), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-phrasing",
      "version": "4.1.0",
      "description": "mdast utility to check if a node is phrasing content",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-phrasing:mdast-util-phrasing:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-phrasing@4.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-phrasing:mdast_util_phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_phrasing:mdast-util-phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_phrasing:mdast_util_phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_phrasing:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-phrasing@4.1.0/node_modules/mdast-util-phrasing/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-to-hast@13.2.0?package-id=dadbe13fed63f5a6",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-to-hast",
      "version": "13.2.0",
      "description": "mdast utility to transform to hast",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-to-hast:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-to-hast@13.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to-hast:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_hast:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_hast:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-to-hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_to_hast:13.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-to-hast@13.2.0/node_modules/mdast-util-to-hast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-to-markdown@2.1.2?package-id=075e987f5c934f71",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-to-markdown",
      "version": "2.1.2",
      "description": "mdast utility to serialize markdown",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-to-markdown:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-to-markdown@2.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to-markdown:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_markdown:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_markdown:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-to-markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_to_markdown:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-to-markdown@2.1.2/node_modules/mdast-util-to-markdown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mdast-util-to-string@4.0.0?package-id=51cad40dc6bb3243",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "mdast-util-to-string",
      "version": "4.0.0",
      "description": "mdast utility to get the plain text content of a node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mdast-util-to-string:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mdast-util-to-string@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to-string:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_string:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to_string:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util-to:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util_to:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast-util:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast_util:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast-util-to-string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mdast:mdast_util_to_string:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mdast-util-to-string@4.0.0/node_modules/mdast-util-to-string/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=12501b37e09821d6",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "media-typer",
      "version": "0.3.0",
      "description": "Simple RFC 6838 media type parser and formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/media-typer@0.3.0/node_modules/media-typer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/media-typer@1.1.1?package-id=2f4eb68e603dadfe",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "media-typer",
      "version": "1.1.1",
      "description": "Simple RFC 6838 media type parser and formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:media-typer:media-typer:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/media-typer@1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media-typer:media_typer:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media_typer:media-typer:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media_typer:media_typer:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media:media-typer:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:media:media_typer:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/media-typer@1.1.1/node_modules/media-typer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/merge-descriptors@1.0.3?package-id=a40c035abb39b082",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Mike Grabowski <grabbou@gmail.com>",
      "name": "merge-descriptors",
      "version": "1.0.3",
      "description": "Merge objects using descriptors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/merge-descriptors@1.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/merge-descriptors@1.0.3/node_modules/merge-descriptors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mermaid@11.12.0?package-id=c4f4ee62f063f7df",
      "type": "library",
      "author": "Knut Sveidqvist",
      "name": "mermaid",
      "version": "11.12.0",
      "description": "Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graphs and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mermaid_project:mermaid:11.12.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/mermaid@11.12.0",
      "externalReferences": [
        {
          "url": "https://github.com/mermaid-js/mermaid",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mermaid@11.12.0/node_modules/mermaid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/methods@1.1.2?package-id=b92083bfcc81bf30",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)",
      "name": "methods",
      "version": "1.1.2",
      "description": "HTTP methods that node supports",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/methods@1.1.2/node_modules/methods/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark@4.0.2?package-id=2646bd3d49bae008",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark",
      "version": "4.0.2",
      "description": "small commonmark compliant markdown parser with positional info and concrete tokens",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark:micromark:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark@4.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark@4.0.2/node_modules/micromark/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-core-commonmark@2.0.3?package-id=022b12df69de2f36",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-core-commonmark",
      "version": "2.0.3",
      "description": "The CommonMark markdown constructs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-core-commonmark:micromark-core-commonmark:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-core-commonmark@2.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-core-commonmark",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-core-commonmark:micromark_core_commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_core_commonmark:micromark-core-commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_core_commonmark:micromark_core_commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-core:micromark-core-commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-core:micromark_core_commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_core:micromark-core-commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_core:micromark_core_commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-core-commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_core_commonmark:2.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-core-commonmark@2.0.3/node_modules/micromark-core-commonmark/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm@3.0.0?package-id=d01da0a0f7ffddd5",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm",
      "version": "3.0.0",
      "description": "micromark extension to support GFM (GitHub Flavored Markdown)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm@3.0.0/node_modules/micromark-extension-gfm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-autolink-literal@2.1.0?package-id=50b4ad86d0733621",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-autolink-literal",
      "version": "2.1.0",
      "description": "micromark extension to support GFM autolink literals",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-autolink-literal:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-autolink-literal@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-autolink-literal:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_autolink_literal:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_autolink_literal:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-autolink:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-autolink:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_autolink:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_autolink:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-autolink-literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_autolink_literal:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-autolink-literal@2.1.0/node_modules/micromark-extension-gfm-autolink-literal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-footnote@2.1.0?package-id=40f620e1b7597d7a",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-footnote",
      "version": "2.1.0",
      "description": "micromark extension to support GFM footnotes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-footnote:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-footnote@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-footnote:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_footnote:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_footnote:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_footnote:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-footnote@2.1.0/node_modules/micromark-extension-gfm-footnote/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-strikethrough@2.1.0?package-id=019612820f0b5d97",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-strikethrough",
      "version": "2.1.0",
      "description": "micromark extension to support GFM strikethrough",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-strikethrough:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-strikethrough@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-strikethrough:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_strikethrough:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_strikethrough:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_strikethrough:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-strikethrough@2.1.0/node_modules/micromark-extension-gfm-strikethrough/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-table@2.1.1?package-id=0f11767a5d090e30",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-table",
      "version": "2.1.1",
      "description": "micromark extension to support GFM tables",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-table:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-table@2.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-table:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_table:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_table:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_table:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-table@2.1.1/node_modules/micromark-extension-gfm-table/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-tagfilter@2.0.0?package-id=528ff2151e41067e",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-tagfilter",
      "version": "2.0.0",
      "description": "micromark extension to support GFM tagfilter",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-tagfilter:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-tagfilter@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-tagfilter:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_tagfilter:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_tagfilter:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_tagfilter:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-tagfilter@2.0.0/node_modules/micromark-extension-gfm-tagfilter/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-gfm-task-list-item@2.1.0?package-id=8ebbd67497538d05",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-gfm-task-list-item",
      "version": "2.1.0",
      "description": "micromark extension to support GFM task list items",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-gfm-task-list-item:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-gfm-task-list-item@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-task-list-item:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task_list_item:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task_list_item:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-task-list:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-task-list:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task_list:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task_list:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-task:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm-task:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm_task:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-gfm:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_gfm:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-gfm-task-list-item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_gfm_task_list_item:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-gfm-task-list-item@2.1.0/node_modules/micromark-extension-gfm-task-list-item/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-extension-math@3.1.0?package-id=e6162b70f2f790ba",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-extension-math",
      "version": "3.1.0",
      "description": "micromark extension to support math (`$C_L$`)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-extension-math:micromark-extension-math:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-extension-math@3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension-math:micromark_extension_math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_math:micromark-extension-math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension_math:micromark_extension_math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark-extension-math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-extension:micromark_extension_math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark-extension-math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_extension:micromark_extension_math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-extension-math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_extension_math:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-extension-math@3.1.0/node_modules/micromark-extension-math/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-factory-destination@2.0.1?package-id=c2a41bde791c4aa1",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-factory-destination",
      "version": "2.0.1",
      "description": "micromark factory to parse destinations (found in resources, definitions)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-factory-destination:micromark-factory-destination:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-factory-destination@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-factory-destination",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory-destination:micromark_factory_destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_destination:micromark-factory-destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_destination:micromark_factory_destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark-factory-destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark_factory_destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark-factory-destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark_factory_destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-factory-destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_factory_destination:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-factory-destination@2.0.1/node_modules/micromark-factory-destination/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-factory-label@2.0.1?package-id=15d47151165f8ee2",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-factory-label",
      "version": "2.0.1",
      "description": "micromark factory to parse labels (found in media, definitions)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-factory-label:micromark-factory-label:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-factory-label@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-factory-label",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory-label:micromark_factory_label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_label:micromark-factory-label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_label:micromark_factory_label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark-factory-label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark_factory_label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark-factory-label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark_factory_label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-factory-label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_factory_label:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-factory-label@2.0.1/node_modules/micromark-factory-label/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-factory-space@2.0.1?package-id=d607989f6a58e5cf",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-factory-space",
      "version": "2.0.1",
      "description": "micromark factory to parse markdown space (found in lots of places)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-factory-space:micromark-factory-space:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-factory-space@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-factory-space",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory-space:micromark_factory_space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_space:micromark-factory-space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_space:micromark_factory_space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark-factory-space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark_factory_space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark-factory-space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark_factory_space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-factory-space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_factory_space:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-factory-space@2.0.1/node_modules/micromark-factory-space/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-factory-title@2.0.1?package-id=f750c3f9eb65f8fa",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-factory-title",
      "version": "2.0.1",
      "description": "micromark factory to parse markdown titles (found in resources, definitions)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-factory-title:micromark-factory-title:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-factory-title@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-factory-title",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory-title:micromark_factory_title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_title:micromark-factory-title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_title:micromark_factory_title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark-factory-title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark_factory_title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark-factory-title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark_factory_title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-factory-title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_factory_title:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-factory-title@2.0.1/node_modules/micromark-factory-title/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-factory-whitespace@2.0.1?package-id=ca83cf087e43d5ab",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-factory-whitespace",
      "version": "2.0.1",
      "description": "micromark factory to parse markdown whitespace (found in lots of places)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-factory-whitespace:micromark-factory-whitespace:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-factory-whitespace@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-factory-whitespace",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory-whitespace:micromark_factory_whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_whitespace:micromark-factory-whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory_whitespace:micromark_factory_whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark-factory-whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-factory:micromark_factory_whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark-factory-whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_factory:micromark_factory_whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-factory-whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_factory_whitespace:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-factory-whitespace@2.0.1/node_modules/micromark-factory-whitespace/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-character@2.1.1?package-id=dee43723555270f8",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-character",
      "version": "2.1.1",
      "description": "micromark utility to handle character codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-character:micromark-util-character:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-character@2.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-character",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-character:micromark_util_character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_character:micromark-util-character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_character:micromark_util_character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_character:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-character@2.1.1/node_modules/micromark-util-character/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-chunked@2.0.1?package-id=a07958976b93c47b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-chunked",
      "version": "2.0.1",
      "description": "micromark utility to splice and push with giant arrays",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-chunked:micromark-util-chunked:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-chunked@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-chunked",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-chunked:micromark_util_chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_chunked:micromark-util-chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_chunked:micromark_util_chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_chunked:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-chunked@2.0.1/node_modules/micromark-util-chunked/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-classify-character@2.0.1?package-id=7124431522ba2dfa",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-classify-character",
      "version": "2.0.1",
      "description": "micromark utility to classify whether a character is whitespace or punctuation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-classify-character:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-classify-character@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-classify-character",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-classify-character:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_classify_character:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_classify_character:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-classify:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-classify:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_classify:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_classify:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-classify-character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_classify_character:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-classify-character@2.0.1/node_modules/micromark-util-classify-character/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-combine-extensions@2.0.1?package-id=99efd47bc9de2972",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-combine-extensions",
      "version": "2.0.1",
      "description": "micromark utility to combine syntax or html extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-combine-extensions:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-combine-extensions@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-combine-extensions",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-combine-extensions:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_combine_extensions:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_combine_extensions:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-combine:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-combine:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_combine:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_combine:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-combine-extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_combine_extensions:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-combine-extensions@2.0.1/node_modules/micromark-util-combine-extensions/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-decode-numeric-character-reference@2.0.2?package-id=b668f6ca6a183065",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-decode-numeric-character-reference",
      "version": "2.0.2",
      "description": "micromark utility to decode numeric character references",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-decode-numeric-character-reference:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-decode-numeric-character-reference@2.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-decode-numeric-character-reference",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-numeric-character-reference:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric_character_reference:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric_character_reference:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-numeric-character:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-numeric-character:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric_character:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric_character:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-numeric:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-numeric:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_numeric:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-decode-numeric-character-reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_decode_numeric_character_reference:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-decode-numeric-character-reference@2.0.2/node_modules/micromark-util-decode-numeric-character-reference/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-decode-string@2.0.1?package-id=7bfc35c07a8322c9",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-decode-string",
      "version": "2.0.1",
      "description": "micromark utility to decode markdown strings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-decode-string:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-decode-string@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-decode-string",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode-string:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_string:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode_string:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-decode:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_decode:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-decode-string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_decode_string:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-decode-string@2.0.1/node_modules/micromark-util-decode-string/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-encode@2.0.1?package-id=f420b61f19eec12f",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-encode",
      "version": "2.0.1",
      "description": "micromark utility to encode dangerous html characters",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-encode:micromark-util-encode:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-encode@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-encode",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-encode:micromark_util_encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_encode:micromark-util-encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_encode:micromark_util_encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_encode:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-encode@2.0.1/node_modules/micromark-util-encode/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-html-tag-name@2.0.1?package-id=4441b1de3d95c34b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-html-tag-name",
      "version": "2.0.1",
      "description": "micromark utility with list of html tag names",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-html-tag-name:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-html-tag-name@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-html-tag-name",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-html-tag-name:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html_tag_name:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html_tag_name:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-html-tag:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-html-tag:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html_tag:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html_tag:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-html:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-html:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_html:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-html-tag-name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_html_tag_name:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-html-tag-name@2.0.1/node_modules/micromark-util-html-tag-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-normalize-identifier@2.0.1?package-id=fb1511564bd250ff",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-normalize-identifier",
      "version": "2.0.1",
      "description": "micromark utility normalize identifiers (as found in references, definitions)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-normalize-identifier:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-normalize-identifier@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-normalize-identifier",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-normalize-identifier:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_normalize_identifier:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_normalize_identifier:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-normalize:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-normalize:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_normalize:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_normalize:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-normalize-identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_normalize_identifier:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-normalize-identifier@2.0.1/node_modules/micromark-util-normalize-identifier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-resolve-all@2.0.1?package-id=804e8e7041991b96",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-resolve-all",
      "version": "2.0.1",
      "description": "micromark utility to resolve subtokens",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-resolve-all:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-resolve-all@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-resolve-all",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-resolve-all:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_resolve_all:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_resolve_all:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-resolve:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-resolve:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_resolve:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_resolve:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-resolve-all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_resolve_all:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-resolve-all@2.0.1/node_modules/micromark-util-resolve-all/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-sanitize-uri@2.0.1?package-id=fabbf0145f530f02",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-sanitize-uri",
      "version": "2.0.1",
      "description": "micromark utility to sanitize urls",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-sanitize-uri:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-sanitize-uri@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-sanitize-uri",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-sanitize-uri:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_sanitize_uri:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_sanitize_uri:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-sanitize:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-sanitize:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_sanitize:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_sanitize:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-sanitize-uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_sanitize_uri:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-sanitize-uri@2.0.1/node_modules/micromark-util-sanitize-uri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-subtokenize@2.1.0?package-id=248eb500c8d2c4ed",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-subtokenize",
      "version": "2.1.0",
      "description": "micromark utility to tokenize subtokens",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-subtokenize:micromark-util-subtokenize:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-subtokenize@2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-subtokenize",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-subtokenize:micromark_util_subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_subtokenize:micromark-util-subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_subtokenize:micromark_util_subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_subtokenize:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-subtokenize@2.1.0/node_modules/micromark-util-subtokenize/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-symbol@2.0.1?package-id=e86b51d805ca2992",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-symbol",
      "version": "2.0.1",
      "description": "micromark utility with symbols",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-symbol:micromark-util-symbol:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-symbol@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-symbol",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-symbol:micromark_util_symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_symbol:micromark-util-symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_symbol:micromark_util_symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_symbol:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-symbol@2.0.1/node_modules/micromark-util-symbol/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/micromark-util-types@2.0.2?package-id=219108269530fce5",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "micromark-util-types",
      "version": "2.0.2",
      "description": "micromark utility with a couple of typescript types",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:micromark-util-types:micromark-util-types:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/micromark-util-types@2.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/micromark/micromark/tree/main/packages/micromark-util-types",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util-types:micromark_util_types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_types:micromark-util-types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util_types:micromark_util_types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark-util-types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark-util:micromark_util_types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark-util-types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark_util:micromark_util_types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark-util-types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:micromark:micromark_util_types:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/micromark-util-types@2.0.2/node_modules/micromark-util-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mime@1.6.0?package-id=ecfe716867ae982a",
      "type": "library",
      "author": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa), Benjamin Thomas <benjamin@benjaminthomas.org> (http://github.com/bentomas)",
      "name": "mime",
      "version": "1.6.0",
      "description": "A comprehensive library for mime-type mapping",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "url": "https://github.com/broofa/node-mime",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mime@1.6.0/node_modules/mime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=6f82be242a34abbc",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Robert Kieffer <robert@broofa.com> (http://github.com/broofa)",
      "name": "mime-db",
      "version": "1.52.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mime-db@1.52.0/node_modules/mime-db/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mime-db@1.54.0?package-id=addbd3f6f0a6f617",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Robert Kieffer <robert@broofa.com> (http://github.com/broofa)",
      "name": "mime-db",
      "version": "1.54.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mime-db:mime-db:1.54.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mime-db@1.54.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime-db:mime_db:1.54.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_db:mime-db:1.54.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_db:mime_db:1.54.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime-db:1.54.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime_db:1.54.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mime-db@1.54.0/node_modules/mime-db/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=16a0254a20de82f0",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su), Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "mime-types",
      "version": "2.1.35",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mime-types@2.1.35/node_modules/mime-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mime-types@3.0.2?package-id=e363572b74e94bb0",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su), Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "mime-types",
      "version": "3.0.2",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mime-types:mime-types:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mime-types@3.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime-types:mime_types:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_types:mime-types:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime_types:mime_types:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime-types:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mime:mime_types:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mime-types@3.0.2/node_modules/mime-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=ce2860bf96875310",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "mimic-response",
      "version": "3.1.0",
      "description": "Mimic a Node.js HTTP response stream",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mimic-response@3.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mimic-response@3.1.0/node_modules/mimic-response/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@10.2.6?package-id=2c289a8c10960f36",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "10.2.6",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:10.2.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@10.2.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minimatch@10.2.6/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@3.1.5?package-id=95e22e402323ba8d",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "3.1.5",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.1.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minimatch@3.1.5/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@5.1.9?package-id=e706adf47927c434",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "5.1.9",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:5.1.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@5.1.9",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minimatch@5.1.9/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@9.0.5?package-id=e38ef2d9a7dcf22c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "9.0.5",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@9.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@9.0.9?package-id=a1e10f8d1560cce7",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "9.0.9",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minimatch@9.0.9/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimatch@9.0.9?package-id=09c8159a8726a8b6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "minimatch",
      "version": "9.0.9",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minimatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minimist@1.2.8?package-id=4b9b75a2028a079a",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "minimist",
      "version": "1.2.8",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "url": "git://github.com/minimistjs/minimist.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/minimistjs/minimist",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minimist@1.2.8/node_modules/minimist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=2e596676ad8ff7e8",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass@3.3.6/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=857034a862c8a5fd",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-flush/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=5e1f3c7107dfa9ca",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-pipeline/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=4d8aa3c931010e7d",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-sized/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=1d17dcdfc72b05c5",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-flush/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=5e75a0fab7d11386",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@3.3.6?package-id=25e74d43692036b6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-sized/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@7.1.2?package-id=a930d0258cc41ba8",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "7.1.2",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@7.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass@7.1.2/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@7.1.2?package-id=ed8659892a5b07ac",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "7.1.2",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@7.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@7.1.3?package-id=4deb3ddfcc24d463",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@7.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass@7.1.3/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass@7.1.3?package-id=4be4eeb5420357fa",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass@7.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=ff289cdd1d33b638",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-collect",
      "version": "2.0.1",
      "description": "A Minipass stream that collects all the data into a single chunk",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-collect@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass-collect",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass-collect@2.0.1/node_modules/minipass-collect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=59165ba44a62f8b3",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-collect",
      "version": "2.0.1",
      "description": "A Minipass stream that collects all the data into a single chunk",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-collect@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass-collect",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-collect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=888c35bbc6e8add0",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-collect",
      "version": "2.0.1",
      "description": "A Minipass stream that collects all the data into a single chunk",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-collect@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/minipass-collect",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-fetch@4.0.1?package-id=e38d02bb778c155e",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "minipass-fetch",
      "version": "4.0.1",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-fetch@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/minipass-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass-fetch@4.0.1/node_modules/minipass-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-fetch@4.0.1?package-id=199172de75bc3d86",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "minipass-fetch",
      "version": "4.0.1",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-fetch@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/minipass-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-fetch@4.0.1?package-id=1f66c849af2c061f",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "minipass-fetch",
      "version": "4.0.1",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-fetch@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/minipass-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=37119dc78457520c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-flush",
      "version": "1.0.5",
      "description": "A Minipass stream that calls a flush function before emitting 'end'",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-flush@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-flush.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-flush/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=333ab3dffdf7c97b",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-flush",
      "version": "1.0.5",
      "description": "A Minipass stream that calls a flush function before emitting 'end'",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-flush@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-flush.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_flush:1.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-flush@1.0.7?package-id=3a79afd860a33ecb",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-flush",
      "version": "1.0.7",
      "description": "A Minipass stream that calls a flush function before emitting 'end'",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-flush@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-flush.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-flush:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_flush:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass-flush@1.0.7/node_modules/minipass-flush/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=9a78ac2898327f50",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "description": "create a pipeline of streams using Minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass-pipeline@1.2.4/node_modules/minipass-pipeline/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=c45fe3cc7c905e81",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "description": "create a pipeline of streams using Minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-pipeline/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=6bcc913ba29941f6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "description": "create a pipeline of streams using Minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=d06a0419b3597819",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-sized",
      "version": "1.0.3",
      "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-sized@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-sized.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minipass-sized@1.0.3/node_modules/minipass-sized/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=41dfab04b2d9156c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-sized",
      "version": "1.0.3",
      "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-sized@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-sized.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-sized/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=b57213893f03c1ff",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "minipass-sized",
      "version": "1.0.3",
      "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minipass-sized@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass-sized.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=fad2185accc46fd1",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minizlib",
      "version": "3.1.0",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minizlib@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minizlib.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/minizlib@3.1.0/node_modules/minizlib/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=69d85fe0c9216865",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minizlib",
      "version": "3.1.0",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minizlib@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minizlib.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minizlib/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=dbc7cd77a00372be",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "minizlib",
      "version": "3.1.0",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/minizlib@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minizlib.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minizlib/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mitt@3.0.1?package-id=9519cebc1b6b26c0",
      "type": "library",
      "author": "Jason Miller <jason@developit.ca>",
      "name": "mitt",
      "version": "3.0.1",
      "description": "Tiny 200b functional Event Emitter / pubsub.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:developit:mitt:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mitt@3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/developit/mitt",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitt:mitt:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mitt@3.0.1/node_modules/mitt/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=d7ac922248170f62",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "mkdirp",
      "version": "0.5.6",
      "description": "Recursively mkdir, like `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "url": "https://github.com/substack/node-mkdirp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mkdirp@0.5.6/node_modules/mkdirp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mkdirp-classic@0.5.3?package-id=bc0dfdd5dd3f7095",
      "type": "library",
      "author": "Mathias Buus (@mafintosh)",
      "name": "mkdirp-classic",
      "version": "0.5.3",
      "description": "Mirror of mkdirp 0.5.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mkdirp-classic@0.5.3",
      "externalReferences": [
        {
          "url": "https://github.com/mafintosh/mkdirp-classic.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/mkdirp-classic",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp-classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp_classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp_classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mkdirp:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mkdirp-classic@0.5.3/node_modules/mkdirp-classic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mlly@1.8.0?package-id=2a2107edb79425f7",
      "type": "library",
      "name": "mlly",
      "version": "1.8.0",
      "description": "Missing ECMAScript module utils for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mlly:mlly:1.8.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mlly@1.8.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/mlly@1.8.0/node_modules/mlly/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/libc@v1.67.6?package-id=817dbcc1c742a44c",
      "type": "library",
      "name": "modernc.org/libc",
      "version": "v1.67.6",
      "purl": "pkg:golang/modernc.org/libc@v1.67.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:eVOQvpModVLKOdT+LvBPjdQqfrZq+pC39BygcT+E7OI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/libc@v1.67.6?package-id=7c7960dab308004e",
      "type": "library",
      "name": "modernc.org/libc",
      "version": "v1.67.6",
      "purl": "pkg:golang/modernc.org/libc@v1.67.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:eVOQvpModVLKOdT+LvBPjdQqfrZq+pC39BygcT+E7OI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/mathutil@v1.7.1?package-id=3d282235d980bc24",
      "type": "library",
      "name": "modernc.org/mathutil",
      "version": "v1.7.1",
      "purl": "pkg:golang/modernc.org/mathutil@v1.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/mathutil@v1.7.1?package-id=06ad73305c520783",
      "type": "library",
      "name": "modernc.org/mathutil",
      "version": "v1.7.1",
      "purl": "pkg:golang/modernc.org/mathutil@v1.7.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/memory@v1.11.0?package-id=f51e0610cb0c223a",
      "type": "library",
      "name": "modernc.org/memory",
      "version": "v1.11.0",
      "purl": "pkg:golang/modernc.org/memory@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/memory@v1.11.0?package-id=f64c011a5ab235ab",
      "type": "library",
      "name": "modernc.org/memory",
      "version": "v1.11.0",
      "purl": "pkg:golang/modernc.org/memory@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/sqlite@v1.44.3?package-id=8c6dcc3118a3c971",
      "type": "library",
      "name": "modernc.org/sqlite",
      "version": "v1.44.3",
      "purl": "pkg:golang/modernc.org/sqlite@v1.44.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+39JvV/HWMcYslAwRxHb8067w+2zowvFOUrOWIy9PjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/modernc.org/sqlite@v1.44.3?package-id=db2264d1150ef34f",
      "type": "library",
      "name": "modernc.org/sqlite",
      "version": "v1.44.3",
      "purl": "pkg:golang/modernc.org/sqlite@v1.44.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+39JvV/HWMcYslAwRxHb8067w+2zowvFOUrOWIy9PjY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/moo@0.5.3?package-id=4f33d2cf6b9205fb",
      "type": "library",
      "author": "Tim Radvan <tim@tjvr.org>, Nathan",
      "name": "moo",
      "version": "0.5.3",
      "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tjvr:moo:0.5.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/moo@0.5.3",
      "externalReferences": [
        {
          "url": "https://github.com/tjvr/moo.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:moo:moo:0.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/moo@0.5.3/node_modules/moo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/motion-dom@12.23.21?package-id=0ea2864b331c7f9e",
      "type": "library",
      "author": "Matt Perry",
      "name": "motion-dom",
      "version": "12.23.21",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:motiondivision:motion-dom:12.23.21:*:*:*:*:*:*:*",
      "purl": "pkg:npm/motion-dom@12.23.21",
      "externalReferences": [
        {
          "url": "https://github.com/motiondivision/motion",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motiondivision:motion_dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion-dom:motion-dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion-dom:motion_dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion_dom:motion-dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion_dom:motion_dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion:motion-dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion:motion_dom:12.23.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/motion-dom@12.23.21/node_modules/motion-dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/motion-utils@12.23.6?package-id=2af49fa585d2c29c",
      "type": "library",
      "author": "Matt Perry",
      "name": "motion-utils",
      "version": "12.23.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:motiondivision:motion-utils:12.23.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/motion-utils@12.23.6",
      "externalReferences": [
        {
          "url": "https://github.com/motiondivision/motion",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motiondivision:motion_utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion-utils:motion-utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion-utils:motion_utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion_utils:motion-utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion_utils:motion_utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion:motion-utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:motion:motion_utils:12.23.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/motion-utils@12.23.6/node_modules/motion-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=e75e0a2b6968d414&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "mount",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mount:mount:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/mount/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/mount.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/mount.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "393"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ms@2.0.0?package-id=d515f661fa8b665b",
      "type": "library",
      "name": "ms",
      "version": "2.0.0",
      "description": "Tiny milisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ms@2.0.0/node_modules/ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ms@2.1.3?package-id=367c2e03999079d1",
      "type": "library",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ms@2.1.3/node_modules/ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ms@2.1.3?package-id=eed51f0c20b7592a",
      "type": "library",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ms@2.1.3?package-id=8caca04449f26d10",
      "type": "library",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ms/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.msgpack/msgpack-core@0.9.10?package-id=cb5b966d0862beb8",
      "type": "library",
      "name": "msgpack-core",
      "version": "0.9.10",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt;description=Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.msgpack.msgpack-core:msgpack-core:0.9.10:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.msgpack/msgpack-core@0.9.10",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e7b1aa5f73766adfd3959370f61a9598254b86ae"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.msgpack.msgpack-core:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack-core:msgpack-core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack-core:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack_core:msgpack-core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack_core:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:messagepack:msgpack-core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:messagepack:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.msgpack:msgpack-core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.msgpack:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack:msgpack-core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msgpack:msgpack_core:0.9.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.msgpack.msgpack-core-0.9.10.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.msgpack.msgpack-core-0.9.10.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/mute-stream@2.0.0?package-id=8dba0d557b7102a4",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "mute-stream",
      "version": "2.0.0",
      "description": "Bytes go in, but they don't come out (when muted).",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mute-stream:mute-stream:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/mute-stream@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/mute-stream.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute-stream:mute_stream:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute_stream:mute-stream:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute_stream:mute_stream:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute:mute-stream:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mute:mute_stream:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/mvdan.cc/sh/v3@v3.11.0?package-id=f30ee42409d4a987",
      "type": "library",
      "name": "mvdan.cc/sh/v3",
      "version": "v3.11.0",
      "cpe": "cpe:2.3:a:sh:v3:v3.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/mvdan.cc/sh/v3@v3.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:q5h+XMDRfUGUedCqFFsjoFjrhwf2Mvtt1rkMvVz0blw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/mvdan.cc/sh/v3@v3.11.0?package-id=fd1e542e5847691a",
      "type": "library",
      "name": "mvdan.cc/sh/v3",
      "version": "v3.11.0",
      "cpe": "cpe:2.3:a:sh:v3:v3.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/mvdan.cc/sh/v3@v3.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:q5h+XMDRfUGUedCqFFsjoFjrhwf2Mvtt1rkMvVz0blw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nan@2.22.2?package-id=eb9c673ea8c413ad",
      "type": "library",
      "author": "Rod Vagg <r@va.gg> (https://github.com/rvagg), Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Trevor Norris <trev.norris@gmail.com> (https://github.com/trevnorris), Nathan Rajlich <nathan@tootallnate.net> (https://github.com/TooTallNate), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Ben Noordhuis <info@bnoordhuis.nl> (https://github.com/bnoordhuis), David Siegel <david@artcom.de> (https://github.com/agnat), Michael Ira Krufky <mkrufky@gmail.com> (https://github.com/mkrufky)",
      "name": "nan",
      "version": "2.22.2",
      "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 22 compatibility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nodejs:nan:2.22.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nan@2.22.2",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/nan.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nan@2.22.2/node_modules/nan/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nanoid@3.3.11?package-id=289a3c9f965f8d6a",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "nanoid",
      "version": "3.3.11",
      "description": "A tiny (116 bytes), secure URL-friendly unique string ID generator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nanoid_project:nanoid:3.3.11:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/nanoid@3.3.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nanoid@3.3.11/node_modules/nanoid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nanoid@5.1.6?package-id=8532bb4ab6b37124",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "nanoid",
      "version": "5.1.6",
      "description": "A tiny (118 bytes), secure URL-friendly unique string ID generator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nanoid_project:nanoid:5.1.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/nanoid@5.1.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/napi-build-utils@2.0.0?package-id=a31904b45af04992",
      "type": "library",
      "author": "Jim Schlight",
      "name": "napi-build-utils",
      "version": "2.0.0",
      "description": "A set of utilities to assist developers of tools that build N-API native add-ons",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/napi-build-utils@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspiredware/napi-build-utils.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/inspiredware/napi-build-utils#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/napi-build-utils@2.0.0/node_modules/napi-build-utils/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/ncurses-base@6.4-4?arch=all&distro=debian-12.15&package-id=ec73073218fd031a&upstream=ncurses",
      "type": "library",
      "publisher": "Craig Small <csmall@debian.org>",
      "name": "ncurses-base",
      "version": "6.4-4",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.4-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/ncurses-base@6.4-4?arch=all&distro=debian-12.15&upstream=ncurses",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-base:ncurses_base:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses-base:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses_base:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-base:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_base:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/ncurses-base/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/ncurses-base.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/ncurses-base.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/ncurses-base.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "379"
        },
        {
          "name": "syft:metadata:source",
          "value": "ncurses"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/ncurses-bin@6.4-4?arch=amd64&distro=debian-12.15&package-id=c5b18ac268f2ccdf&upstream=ncurses",
      "type": "library",
      "publisher": "Craig Small <csmall@debian.org>",
      "name": "ncurses-bin",
      "version": "6.4-4",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.4-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/ncurses-bin@6.4-4?arch=amd64&distro=debian-12.15&upstream=ncurses",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-bin:ncurses_bin:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_bin:ncurses-bin:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_bin:ncurses_bin:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-bin:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_bin:6.4-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/ncurses-bin/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/ncurses-bin.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/ncurses-bin.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "636"
        },
        {
          "name": "syft:metadata:source",
          "value": "ncurses"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nearley@2.20.1?package-id=3856f6706d15375d",
      "type": "library",
      "author": "Hardmath123, https://github.com/Hardmath123/nearley/graphs/contributors",
      "name": "nearley",
      "version": "2.20.1",
      "description": "Simple, fast, powerful parser toolkit for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:hardmath123:nearley:2.20.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nearley@2.20.1",
      "externalReferences": [
        {
          "url": "https://github.com/hardmath123/nearley.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nearley:nearley:2.20.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nearley@2.20.1/node_modules/nearley/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=0254fddf2f55ebeb",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "0.6.3",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/negotiator@0.6.4?package-id=a0a4739fea97f769",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "0.6.4",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@0.6.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/negotiator@0.6.4/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=c71fbb638003959c",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "1.0.0",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/negotiator@1.0.0/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=6faacb8d43281ea1",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "1.0.0",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=cbc40dddab6416f9",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "negotiator",
      "version": "1.0.0",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/negotiator/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/next-themes@0.4.6?package-id=79906769dabc3548",
      "type": "library",
      "name": "next-themes",
      "version": "0.4.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:next-themes:next-themes:0.4.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/next-themes@0.4.6",
      "externalReferences": [
        {
          "url": "https://github.com/pacocoursey/next-themes.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:next-themes:next_themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:next_themes:next-themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:next_themes:next_themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pacocoursey:next-themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pacocoursey:next_themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:next:next-themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:next:next_themes:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/next-themes@0.4.6_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/next-themes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:composer/nikic/php-parser@v5.7.0?package-id=3959226597e2e091",
      "type": "library",
      "name": "nikic/php-parser",
      "version": "v5.7.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nikic\\/php-parser:nikic\\/php-parser:v5.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:composer/nikic/php-parser@v5.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "php-composer-installed-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "php"
        },
        {
          "name": "syft:package:type",
          "value": "php-composer"
        },
        {
          "name": "syft:package:metadataType",
          "value": "php-composer-installed-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nikic\\/php-parser:nikic\\/php_parser:v5.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nikic\\/php_parser:nikic\\/php-parser:v5.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nikic\\/php_parser:nikic\\/php_parser:v5.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nikic\\/php:nikic\\/php-parser:v5.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nikic\\/php:nikic\\/php_parser:v5.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom-parsetools@1.3.0/node_modules/@appthreat/atom-parsetools/plugins/composer/installed.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:generic/node@22.23.2?package-id=215b5b92fc0c4870",
      "type": "application",
      "name": "node",
      "version": "22.23.2",
      "cpe": "cpe:2.3:a:nodejs:node.js:22.23.2:*:*:*:*:*:*:*",
      "purl": "pkg:generic/node@22.23.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "binary-classifier-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "binary"
        },
        {
          "name": "syft:package:metadataType",
          "value": "binary-signature"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/bin/node"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-abi@3.94.0?package-id=8df87d55133b7aee",
      "type": "library",
      "author": "Lukas Geiger",
      "name": "node-abi",
      "version": "3.94.0",
      "description": "Get the Node ABI for a given target and runtime, and vice versa.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:electron:node-abi:3.94.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-abi@3.94.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/electron/node-abi.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/electron/node-abi#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:electron:node_abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-abi:node-abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-abi:node_abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_abi:node-abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_abi:node_abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_abi:3.94.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-abi@3.94.0/node_modules/node-abi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-fetch@2.7.0?package-id=f11fa927202f6772",
      "type": "library",
      "author": "David Frank",
      "name": "node-fetch",
      "version": "2.7.0",
      "description": "A light-weight module that brings window.fetch to node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-fetch_project:node-fetch:2.7.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/node-fetch@2.7.0",
      "externalReferences": [
        {
          "url": "https://github.com/bitinn/node-fetch.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/bitinn/node-fetch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-fetch@2.7.0/node_modules/node-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-fetch@2.7.0?package-id=0ea02f39893e2483",
      "type": "library",
      "author": "David Frank",
      "name": "node-fetch",
      "version": "2.7.0",
      "description": "A light-weight module that brings window.fetch to node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-fetch_project:node-fetch:2.7.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/node-fetch@2.7.0",
      "externalReferences": [
        {
          "url": "https://github.com/bitinn/node-fetch.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/bitinn/node-fetch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-fetch@2.7.0_encoding@0.1.13/node_modules/node-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-gyp@11.1.0?package-id=ef7b0bf8ba3c7b61",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
      "name": "node-gyp",
      "version": "11.1.0",
      "description": "Node.js native addon build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-gyp:node-gyp:11.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-gyp@11.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node-gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node_gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp:11.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/node-gyp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-gyp@11.5.0?package-id=2f6f0482e0a7551c",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
      "name": "node-gyp",
      "version": "11.5.0",
      "description": "Node.js native addon build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-gyp:node-gyp:11.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-gyp@11.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-gyp@11.5.0/node_modules/node-gyp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-gyp@11.5.0?package-id=45819af1ced7ed33",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
      "name": "node-gyp",
      "version": "11.5.0",
      "description": "Node.js native addon build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-gyp:node-gyp:11.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-gyp@11.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/node-gyp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp:11.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-gyp-build@4.8.4?package-id=0d4991e30eda8dc0",
      "type": "library",
      "author": "Mathias Buus (@mafintosh)",
      "name": "node-gyp-build",
      "version": "4.8.4",
      "description": "Build tool and bindings loader for node-gyp that supports prebuilds",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-gyp-build:node-gyp-build:4.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-gyp-build@4.8.4",
      "externalReferences": [
        {
          "url": "https://github.com/prebuild/node-gyp-build.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/prebuild/node-gyp-build",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp-build:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp_build:node-gyp-build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp_build:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node-gyp-build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp-build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild:node-gyp-build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp-build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp_build:4.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-gyp-build@4.8.4/node_modules/node-gyp-build/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-releases@2.0.23?package-id=cb5dc259eb47bfa8",
      "type": "library",
      "author": "Sergey Rubanov <chi187@gmail.com>",
      "name": "node-releases",
      "version": "2.0.23",
      "description": "Node.js releases data",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-releases:node-releases:2.0.23:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-releases@2.0.23",
      "externalReferences": [
        {
          "url": "git+https://github.com/chicoxyzzy/node-releases.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-releases:node_releases:2.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_releases:node-releases:2.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_releases:node_releases:2.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-releases:2.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_releases:2.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-releases@2.0.23/node_modules/node-releases/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/node-stream-zip@1.16.0?package-id=05ed247ec00cdec1",
      "type": "library",
      "author": "Antelle <antelle.net@gmail.com> (https://github.com/antelle)",
      "name": "node-stream-zip",
      "version": "1.16.0",
      "description": "node.js library for reading and extraction of ZIP archives",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node-stream-zip:node-stream-zip:1.16.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/node-stream-zip@1.16.0",
      "externalReferences": [
        {
          "url": "https://github.com/antelle/node-stream-zip.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antelle/node-stream-zip",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-stream-zip:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_stream_zip:node-stream-zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_stream_zip:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-stream:node-stream-zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-stream:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_stream:node-stream-zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_stream:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antelle:node-stream-zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antelle:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-stream-zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_stream_zip:1.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/node-stream-zip@1.16.0/node_modules/node-stream-zip/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nopt@8.1.0?package-id=cdfdf6742eac9956",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "nopt",
      "version": "8.1.0",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nopt@8.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nopt@8.1.0/node_modules/nopt/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nopt@8.1.0?package-id=e98d36cea2c02846",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "nopt",
      "version": "8.1.0",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nopt@8.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/nopt/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nopt@8.1.0?package-id=05aeb562621e68b6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "nopt",
      "version": "8.1.0",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nopt@8.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/nopt/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/normalize-package-data@7.0.1?package-id=2d95c8154bd46015",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "normalize-package-data",
      "version": "7.0.1",
      "description": "Normalizes data that can be found in package.json files.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:7.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/normalize-package-data@7.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/normalize-package-data.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package-data:normalize_package_data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package_data:normalize-package-data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package_data:normalize_package_data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package:normalize-package-data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package:normalize_package_data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package:normalize-package-data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package:normalize_package_data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize-package-data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize_package_data:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/normalize-package-data/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/normalize-package-data@8.0.0?package-id=722bdd78e1d3ff0c",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "normalize-package-data",
      "version": "8.0.0",
      "description": "Normalizes data that can be found in package.json files.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/normalize-package-data@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/normalize-package-data.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package-data:normalize_package_data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package_data:normalize-package-data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package_data:normalize_package_data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package:normalize-package-data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-package:normalize_package_data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package:normalize-package-data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_package:normalize_package_data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize-package-data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize_package_data:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/normalize-package-data@8.0.0/node_modules/normalize-package-data/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/normalize-path@3.0.0?package-id=773cad61c7da5adf",
      "type": "library",
      "author": "Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Jon Schlinkert (http://twitter.com/jonschlinkert)",
      "name": "normalize-path",
      "version": "3.0.0",
      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/jonschlinkert/normalize-path",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-path:normalize_path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_path:normalize-path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_path:normalize_path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jonschlinkert:normalize-path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jonschlinkert:normalize_path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize-path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize_path:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/normalize-path@3.0.0/node_modules/normalize-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/normalize-range@0.1.2?package-id=aefea309cb1700e9",
      "type": "library",
      "author": "James Talmage <james@talmage.io> (github.com/jamestalmage)",
      "name": "normalize-range",
      "version": "0.1.2",
      "description": "Utility for normalizing a numeric range, with a wrapping function useful for polar coordinates",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:normalize-range:normalize-range:0.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/normalize-range@0.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize-range:normalize_range:0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_range:normalize-range:0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize_range:normalize_range:0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize-range:0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:normalize:normalize_range:0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/normalize-range@0.1.2/node_modules/normalize-range/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm@10.9.8?package-id=f3d6d02050e97ad7",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm",
      "version": "10.9.8",
      "description": "a package manager for JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:node_packaged_modules_project:node_packaged_modules:10.9.8:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/npm@10.9.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cli.git",
          "type": "distribution"
        },
        {
          "url": "https://docs.npmjs.com/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-audit-report@6.0.0?package-id=a7061ae2a63dd435",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-audit-report",
      "version": "6.0.0",
      "description": "Given a response from the npm security api, render it into a variety of security reports",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-audit-report@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-audit-report.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/npm-audit-report#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit-report:npm_audit_report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit_report:npm-audit-report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit_report:npm_audit_report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit:npm-audit-report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-audit:npm_audit_report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit:npm-audit-report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_audit:npm_audit_report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-audit-report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_audit_report:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-bundled@4.0.0?package-id=fad75d4e438f45f1",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-bundled",
      "version": "4.0.0",
      "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-bundled@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-bundled.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-bundled:npm_bundled:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_bundled:npm-bundled:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_bundled:npm_bundled:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-bundled:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_bundled:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-install-checks@7.1.2?package-id=eef79b9a8f5b7b56",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-install-checks",
      "version": "7.1.2",
      "description": "Check the engines and platform fields in package.json",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:7.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-install-checks@7.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-install-checks.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install-checks:npm_install_checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm-install-checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm_install_checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm-install-checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm_install_checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm-install-checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm_install_checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-install-checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_install_checks:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-install-checks@8.0.0?package-id=99e7d19020aa4e02",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-install-checks",
      "version": "8.0.0",
      "description": "Check the engines and platform fields in package.json",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:8.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-install-checks@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-install-checks.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install-checks:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install_checks:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-install:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_install:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-install-checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_install_checks:8.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/npm-install-checks@8.0.0/node_modules/npm-install-checks/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-normalize-package-bin@4.0.0?package-id=73ef53e0b544c3c6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-normalize-package-bin",
      "version": "4.0.0",
      "description": "Turn any flavor of allowable package.json bin into a normalized object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-normalize-package-bin@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-normalize-package-bin.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-normalize-package-bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_normalize_package_bin:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-normalize-package-bin@5.0.0?package-id=8ec6186e363a089c",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-normalize-package-bin",
      "version": "5.0.0",
      "description": "Turn any flavor of allowable package.json bin into a normalized object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-normalize-package-bin@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-normalize-package-bin.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-normalize-package-bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_normalize_package_bin:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/npm-normalize-package-bin@5.0.0/node_modules/npm-normalize-package-bin/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-package-arg@12.0.2?package-id=785a1819d7a7f7f0",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-package-arg",
      "version": "12.0.2",
      "description": "Parse the things that can be arguments to `npm install`",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:12.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-package-arg@12.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-package-arg.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/npm-package-arg",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package-arg:npm_package_arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm-package-arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm_package_arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm-package-arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm_package_arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm-package-arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm_package_arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-package-arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_package_arg:12.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-package-arg@13.0.2?package-id=e13d723525e39037",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-package-arg",
      "version": "13.0.2",
      "description": "Parse the things that can be arguments to `npm install`",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:13.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-package-arg@13.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-package-arg.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/npm-package-arg",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package-arg:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package_arg:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-package:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_package:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-package-arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_package_arg:13.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/npm-package-arg@13.0.2/node_modules/npm-package-arg/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-packlist@9.0.0?package-id=23246576fb4a75ed",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-packlist",
      "version": "9.0.0",
      "description": "Get a list of the files to add from a folder into an npm package",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:9.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-packlist@9.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-packlist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-packlist:npm_packlist:9.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_packlist:npm-packlist:9.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_packlist:npm_packlist:9.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-packlist:9.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_packlist:9.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-pick-manifest@10.0.0?package-id=3ccc9636fd429e90",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-pick-manifest",
      "version": "10.0.0",
      "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:10.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-pick-manifest@10.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-pick-manifest.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick-manifest:npm_pick_manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm-pick-manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm_pick_manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm-pick-manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm_pick_manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm-pick-manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm_pick_manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-pick-manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_pick_manifest:10.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-pick-manifest@11.0.3?package-id=63b91a048ff4bda1",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-pick-manifest",
      "version": "11.0.3",
      "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-pick-manifest@11.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-pick-manifest.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick-manifest:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick_manifest:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-pick:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_pick:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-pick-manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_pick_manifest:11.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/npm-pick-manifest@11.0.3/node_modules/npm-pick-manifest/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-profile@11.0.1?package-id=af5af53606a4d007",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-profile",
      "version": "11.0.1",
      "description": "Library for updating an npmjs.com profile",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-profile:npm-profile:11.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-profile@11.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-profile.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-profile:npm_profile:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_profile:npm-profile:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_profile:npm_profile:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-profile:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_profile:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-registry-fetch@18.0.2?package-id=6f69202a9a5d1508",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-registry-fetch",
      "version": "18.0.2",
      "description": "Fetch-based http client for use with npm registry APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:18.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-registry-fetch@18.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-registry-fetch.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry-fetch:npm_registry_fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry_fetch:npm-registry-fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry_fetch:npm_registry_fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry:npm-registry-fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-registry:npm_registry_fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry:npm-registry-fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_registry:npm_registry_fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-registry-fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_registry_fetch:18.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/npm-user-validate@3.0.0?package-id=3fe0b503a65721fb",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "npm-user-validate",
      "version": "3.0.0",
      "description": "User validations for npm",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/npm-user-validate@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-user-validate.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user-validate:npm_user_validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user_validate:npm-user-validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user_validate:npm_user_validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user:npm-user-validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm-user:npm_user_validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user:npm-user-validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm_user:npm_user_validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm-user-validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:npm_user_validate:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/nth-check@2.1.1?package-id=af65ad7eb81f9c56",
      "type": "library",
      "author": "Felix Boehm <me@feedic.com>",
      "name": "nth-check",
      "version": "2.1.1",
      "description": "Parses and compiles CSS nth-checks to highly optimized functions.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nth-check:nth-check:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/nth-check@2.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/fb55/nth-check",
          "type": "distribution"
        },
        {
          "url": "https://github.com/fb55/nth-check",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nth-check:nth_check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nth_check:nth-check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nth_check:nth_check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:nth-check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fb55:nth_check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nth:nth-check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nth:nth_check:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/nth-check@2.1.1/node_modules/nth-check/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=94ca3674e5477ac4",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "object-assign",
      "version": "4.1.1",
      "description": "ES2015 `Object.assign()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/object-assign@4.1.1/node_modules/object-assign/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/object-inspect@1.13.4?package-id=b5f7e4418bb68048",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "object-inspect",
      "version": "1.13.4",
      "description": "string representations of objects in node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/object-inspect.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/inspect-js/object-inspect",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:object-inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inspect-js:object_inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/object-inspect@1.13.4/node_modules/object-inspect/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/odb2-core_3@2.2.1?package-id=b5c9d36d5873d01b",
      "type": "library",
      "name": "odb2-core_3",
      "version": "2.2.1",
      "cpe": "cpe:2.3:a:io.appthreat:odb2-core-3:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/odb2-core_3@2.2.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8411bae8acc65d93d4c47455f0e3be77a3a92897"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core-3:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core-3:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core-3:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core_3:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core_3:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core_3:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core_3:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core_3:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core_3:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-core:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_core:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-core-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2_core_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-core_3-2.2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-core_3-2.2.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/odb2-formats_3@2.2.1?package-id=791b7c95a6124201",
      "type": "library",
      "name": "odb2-formats_3",
      "version": "2.2.1",
      "cpe": "cpe:2.3:a:odb2-formats-3:odb2-formats-3:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/odb2-formats_3@2.2.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "605aa2c915077c32194a4d9d0b867990e9caa642"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats-3:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats-3:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats_3:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats_3:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats_3:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats_3:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats_3:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats_3:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-formats:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_formats:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-formats-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2_formats_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-formats_3-2.2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-formats_3-2.2.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/odb2-traversal_3@2.2.1?package-id=3a65bab5498594b5",
      "type": "library",
      "name": "odb2-traversal_3",
      "version": "2.2.1",
      "cpe": "cpe:2.3:a:odb2-traversal-3:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/odb2-traversal_3@2.2.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0740b73deb13ee4d6b029c12144f33fff4be8687"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal-3:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal-3:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal_3:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal_3:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal_3:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal_3:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal_3:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal_3:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2-traversal:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2_traversal:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-traversal-3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2-traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:odb2:odb2_traversal_3:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-traversal_3-2.2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.odb2-traversal_3-2.2.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=d80c8b13553b89e1",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "on-finished",
      "version": "2.3.0",
      "description": "Execute a callback when a request closes, finishes, or errors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/on-finished@2.3.0/node_modules/on-finished/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/on-finished@2.4.1?package-id=d4d142afef3215a4",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "on-finished",
      "version": "2.4.1",
      "description": "Execute a callback when a request closes, finishes, or errors",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/on-finished@2.4.1/node_modules/on-finished/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/on-headers@1.1.0?package-id=2ab13a7249c5e516",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "on-headers",
      "version": "1.1.0",
      "description": "Execute a listener when a response is about to write headers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/on-headers@1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/on-headers@1.1.0/node_modules/on-headers/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/once@1.4.0?package-id=e7d82bc406edaa84",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/once",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/once@1.4.0/node_modules/once/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/oniguruma-parser@0.12.1?package-id=ba59c42f65be9641",
      "type": "library",
      "author": "Steven Levithan",
      "name": "oniguruma-parser",
      "version": "0.12.1",
      "description": "Parse, validate, traverse, transform, and optimize Oniguruma regular expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:oniguruma-parser:oniguruma-parser:0.12.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/oniguruma-parser@0.12.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/slevithan/oniguruma-parser.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma-parser:oniguruma_parser:0.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_parser:oniguruma-parser:0.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_parser:oniguruma_parser:0.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma:oniguruma-parser:0.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma:oniguruma_parser:0.12.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/oniguruma-parser@0.12.1/node_modules/oniguruma-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/oniguruma-to-es@4.3.3?package-id=be7f5417cedd3e66",
      "type": "library",
      "author": "Steven Levithan",
      "name": "oniguruma-to-es",
      "version": "4.3.3",
      "description": "Convert Oniguruma patterns to native JavaScript RegExp",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:oniguruma-to-es:oniguruma-to-es:4.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/oniguruma-to-es@4.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/slevithan/oniguruma-to-es.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma-to-es:oniguruma_to_es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_to_es:oniguruma-to-es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_to_es:oniguruma_to_es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma-to:oniguruma-to-es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma-to:oniguruma_to_es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_to:oniguruma-to-es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma_to:oniguruma_to_es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma:oniguruma-to-es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oniguruma:oniguruma_to_es:4.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/oniguruma-to-es@4.3.3/node_modules/oniguruma-to-es/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/openssh-client@1%3A9.2p1-2%2Bdeb12u10?arch=amd64&distro=debian-12.15&package-id=d82af4e74abd89bc&upstream=openssh",
      "type": "library",
      "publisher": "Debian OpenSSH Maintainers <debian-ssh@lists.debian.org>",
      "name": "openssh-client",
      "version": "1:9.2p1-2+deb12u10",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "name": "Expat-with-advertising-restriction"
          }
        },
        {
          "license": {
            "name": "Mazieres-BSD-style"
          }
        },
        {
          "license": {
            "name": "OpenSSH"
          }
        },
        {
          "license": {
            "name": "Powell-BSD-style"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:openssh-client:openssh-client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/openssh-client@1%3A9.2p1-2%2Bdeb12u10?arch=amd64&distro=debian-12.15&upstream=openssh",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh-client:openssh_client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh-client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh_client:openssh_client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh-client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssh:openssh_client:1\\:9.2p1-2\\+deb12u10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/openssh-client/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/openssh-client.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/openssh-client.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/openssh-client.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/openssh-client.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/openssh-client.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/openssh-client.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/openssh-client.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "5801"
        },
        {
          "name": "syft:metadata:source",
          "value": "openssh"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/oras.land/oras-go/v2@v2.6.0?package-id=b4cbb593d87c3679",
      "type": "library",
      "name": "oras.land/oras-go/v2",
      "version": "v2.6.0",
      "cpe": "cpe:2.3:a:oras-go:v2:v2.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/oras.land/oras-go/v2@v2.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oras_go:v2:v2.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oras:v2:v2.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/oras.land/oras-go/v2@v2.6.0?package-id=62649d4e4faafe8f",
      "type": "library",
      "name": "oras.land/oras-go/v2",
      "version": "v2.6.0",
      "cpe": "cpe:2.3:a:oras-go:v2:v2.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/oras.land/oras-go/v2@v2.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oras_go:v2:v2.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oras:v2:v2.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.cdt/org.eclipse.cdt.core@9.3.100-SNAPSHOT?package-id=cc709b1fc559ed2f",
      "type": "library",
      "group": "org.eclipse.cdt",
      "name": "org.eclipse.cdt.core",
      "version": "9.3.100-SNAPSHOT",
      "cpe": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.eclipse.cdt/org.eclipse.cdt.core@9.3.100-SNAPSHOT",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "331274c7fe0bcb16d2347e15c62273588bb46ac3"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core.CCorePlugin:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt-parent:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:org.eclipse.cdt.core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt.core:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.cdt:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:CCorePlugin:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:CCorePlugin:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt-parent:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:cdt-parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:cdt_parent:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt_parent:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:core:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cdt:cdt:9.3.100-SNAPSHOT:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.cdt.core_9.3.100.202512101642.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "org.eclipse.cdt.core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.cdt"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.cdt.core_9.3.100.202512101642.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.core.internal.jobs.JobActivator/org.eclipse.platform.org.eclipse.core.jobs@3.15.700?package-id=e6549ec3de0186e6",
      "type": "library",
      "name": "org.eclipse.platform.org.eclipse.core.jobs",
      "version": "3.15.700",
      "cpe": "cpe:2.3:a:org.eclipse.core.internal.jobs.JobActivator:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.eclipse.core.internal.jobs.JobActivator/org.eclipse.platform.org.eclipse.core.jobs@3.15.700",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b9bca244ec975304f467de46f6e14ae75948156f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.jobs:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.jobs:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.jobs.JobActivator:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JobActivator:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.jobs:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.jobs.JobActivator:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.jobs:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.jobs.JobActivator:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.jobs.JobActivator:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jobs:org.eclipse.platform.org.eclipse.core.jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.jobs:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.jobs:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.jobs:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.jobs:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.jobs:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.jobs:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JobActivator:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JobActivator:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JobActivator:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JobActivator:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jobs:JobActivator:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jobs:internal:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jobs:core:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jobs:jobs:3.15.700:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.core.jobs-3.15.700.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.core.jobs-3.15.700.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.core.internal.runtime.PlatformActivator/org.eclipse.platform.org.eclipse.core.runtime@3.34.200?package-id=1eaa729f5e235429",
      "type": "library",
      "name": "org.eclipse.platform.org.eclipse.core.runtime",
      "version": "3.34.200",
      "cpe": "cpe:2.3:a:org.eclipse.core.internal.runtime.PlatformActivator:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.eclipse.core.internal.runtime.PlatformActivator/org.eclipse.platform.org.eclipse.core.runtime@3.34.200",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "191091a9e664983a294c32fb0a588467217a6b7b"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.runtime:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.runtime:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.PlatformActivator:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PlatformActivator:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.runtime:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.PlatformActivator:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.PlatformActivator:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.PlatformActivator:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.runtime:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.runtime:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:org.eclipse.platform.org.eclipse.core.runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.core.runtime:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.runtime:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PlatformActivator:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.runtime:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.runtime:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.runtime:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PlatformActivator:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PlatformActivator:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PlatformActivator:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:PlatformActivator:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:internal:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:runtime:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.34.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.core.runtime-3.34.200.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.core.runtime-3.34.200.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.core.internal.runtime.Activator/org.eclipse.platform.org.eclipse.equinox.common@3.20.400?package-id=58cae2cb0e9450fd",
      "type": "library",
      "name": "org.eclipse.platform.org.eclipse.equinox.common",
      "version": "3.20.400",
      "cpe": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.eclipse.core.internal.runtime.Activator/org.eclipse.platform.org.eclipse.equinox.common@3.20.400",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "765de9c100b18a24bc3ae13902eff852291abb85"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:org.eclipse.platform.org.eclipse.equinox.common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.equinox.common:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.core.internal.runtime.Activator:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.equinox.common:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:Activator:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:internal:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:equinox:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:runtime:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:equinox:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:runtime:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:common:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.20.400:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.equinox.common-3.20.400.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.equinox.common-3.20.400.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.osgi/org.eclipse.platform.org.eclipse.osgi@3.24.200?package-id=710639ed5194e8ee",
      "type": "library",
      "name": "org.eclipse.platform.org.eclipse.osgi",
      "version": "3.24.200",
      "cpe": "cpe:2.3:a:org.eclipse.osgi.internal.framework.SystemBundleActivator:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.eclipse.osgi/org.eclipse.platform.org.eclipse.osgi@3.24.200",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c0ab2038a8bd0dc6639dfc306fc340fd5a1836f6"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi.internal.framework.SystemBundleActivator:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.osgi:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi.internal.framework.SystemBundleActivator:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi.internal.framework.SystemBundleActivator:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi.internal.framework.SystemBundleActivator:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SystemBundleActivator:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.osgi:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framework:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.osgi:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.osgi:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SystemBundleActivator:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.platform.org.eclipse.osgi:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:org.eclipse.platform.org.eclipse.osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SystemBundleActivator:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framework:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SystemBundleActivator:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SystemBundleActivator:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:SystemBundleActivator:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.eclipse.osgi:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framework:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framework:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:framework:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:framework:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:internal:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:internal:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi:3.24.200:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.osgi-3.24.200.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.eclipse.platform.org.eclipse.osgi-3.24.200.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.osgi/org.osgi.service.prefs@1.1.2?package-id=4ac4d8e01a130f43",
      "type": "library",
      "group": "org.osgi",
      "name": "org.osgi.service.prefs",
      "version": "1.1.2",
      "licenses": [
        {
          "license": {
            "name": "Apache-2.0;description=\"This program and the accompanying materials are made available under the terms of the Apache License, Version 2.0.\";link=\"https://opensource.org/licenses/Apache-2.0\""
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.osgi.service.prefs:org.osgi.service.prefs:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.osgi/org.osgi.service.prefs@1.1.2",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "44351fdfb119ee920394c1a27c938288c93c03c8"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi:org.osgi.service.prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi.service.prefs:service:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:service:org.osgi.service.prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi.service.prefs:prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prefs:org.osgi.service.prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:org.osgi.service.prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi:service:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:service:service:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi:prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prefs:service:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:service:prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:service:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prefs:prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:prefs:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.osgi.org.osgi.service.prefs-1.1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "org.osgi.service.prefs"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.osgi"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.osgi.org.osgi.service.prefs-1.1.2.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.osgi/osgi.annotation@8.0.1?package-id=aca42d8c80a924da",
      "type": "library",
      "group": "org.osgi",
      "name": "osgi.annotation",
      "version": "8.0.1",
      "licenses": [
        {
          "license": {
            "name": "Apache-2.0;description=\"This program and the accompanying materials are made available under the terms of the Apache License, Version 2.0.\";link=\"https://opensource.org/licenses/Apache-2.0\""
          }
        }
      ],
      "cpe": "cpe:2.3:a:osgi.annotation:osgi.annotation:8.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.osgi/osgi.annotation@8.0.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "593d823753aa6e128129da357d7891758e66aa1d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.osgi:osgi.annotation:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi.annotation:8.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.osgi.osgi.annotation-8.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "osgi.annotation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.osgi"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.osgi.osgi.annotation-8.0.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/p-map@7.0.3?package-id=fdfac52ae1dc87ac",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "p-map",
      "version": "7.0.3",
      "description": "Map over promises concurrently",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:p-map:p-map:7.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/p-map@7.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p-map:p_map:7.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p-map:7.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p_map:7.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p-map:7.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p_map:7.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/p-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/p-map@7.0.4?package-id=686567ab1946e5fa",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "p-map",
      "version": "7.0.4",
      "description": "Map over promises concurrently",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:p-map:p-map:7.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/p-map@7.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p-map:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p-map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p-map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p_map:7.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/p-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/p-map@7.0.6?package-id=951c66e2f47ac831",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "p-map",
      "version": "7.0.6",
      "description": "Map over promises concurrently",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:p-map:p-map:7.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/p-map@7.0.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p-map:p_map:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p-map:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p_map:p_map:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p-map:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p:p_map:7.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/p-map@7.0.6/node_modules/p-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1?package-id=2cec43b546e3a66a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/package-json-from-dist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/package-json-from-dist@1.0.1/node_modules/package-json-from-dist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1?package-id=1d33ed8434b6359a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/package-json-from-dist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/package-json-from-dist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1?package-id=c41946eaecede2e6",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/package-json-from-dist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/package-json-from-dist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/package-manager-detector@1.5.0?package-id=7be8c2a5fd46b43d",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "package-manager-detector",
      "version": "1.5.0",
      "description": "Package manager detector",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:package-manager-detector:package-manager-detector:1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/package-manager-detector@1.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/antfu-collective/package-manager-detector.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antfu-collective/package-manager-detector#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-manager-detector:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_manager_detector:package-manager-detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_manager_detector:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antfu-collective:package-manager-detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antfu-collective:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-manager:package-manager-detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-manager:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_manager:package-manager-detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package_manager:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package-manager-detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package:package_manager_detector:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/package-manager-detector@1.5.0/node_modules/package-manager-detector/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/packageurl-js@1.0.2?package-id=ac158e3582e1281d",
      "type": "library",
      "author": "the purl authors",
      "name": "packageurl-js",
      "version": "1.0.2",
      "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:packageurl-js:packageurl-js:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/packageurl-js@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/package-url/packageurl-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl-js:packageurl_js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl_js:packageurl-js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl_js:packageurl_js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl-js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl_js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl:packageurl-js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl:packageurl_js:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/packageurl-js@1.0.2/node_modules/packageurl-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/packageurl-js@2.0.1?package-id=1d8bd20ea7d50010",
      "type": "library",
      "author": "the purl authors",
      "name": "packageurl-js",
      "version": "2.0.1",
      "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:packageurl-js:packageurl-js:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/packageurl-js@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/package-url/packageurl-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl-js:packageurl_js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl_js:packageurl-js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl_js:packageurl_js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl-js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:package-url:packageurl_js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl:packageurl-js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:packageurl:packageurl_js:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/packageurl-js@2.0.1/node_modules/packageurl-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pacote@19.0.2?package-id=4ed83516bd262386",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "pacote",
      "version": "19.0.2",
      "description": "JavaScript package downloader",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pacote:pacote:19.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pacote@19.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/pacote.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/pacote/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pacote@20.0.1?package-id=8b7d17555abf20fc",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "pacote",
      "version": "20.0.1",
      "description": "JavaScript package downloader",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pacote:pacote:20.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pacote@20.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/pacote.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/node_modules/pacote/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pako@1.0.11?package-id=3e61ab1689bf27b7",
      "type": "library",
      "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin), Friedel Ziegelmayer (https://github.com/dignifiedquire), Kirill Efimov (https://github.com/Kirill89), Jean-loup Gailly, Mark Adler",
      "name": "pako",
      "version": "1.0.11",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "expression": "MIT AND Zlib"
        }
      ],
      "cpe": "cpe:2.3:a:nodeca:pako:1.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "url": "https://github.com/nodeca/pako",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pako@1.0.11/node_modules/pako/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pako@2.2.0?package-id=5d5591b457d97d5b",
      "type": "library",
      "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin), Friedel Ziegelmayer (https://github.com/dignifiedquire), Kirill Efimov (https://github.com/Kirill89), Jean-loup Gailly, Mark Adler",
      "name": "pako",
      "version": "2.2.0",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "expression": "MIT AND Zlib"
        }
      ],
      "cpe": "cpe:2.3:a:pako:pako:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pako@2.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pako@2.2.0/node_modules/pako/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?package-id=c013a1fbd3d07f4f",
      "type": "library",
      "group": "com.thoughtworks.paranamer",
      "name": "paranamer",
      "version": "2.8",
      "licenses": [
        {
          "license": {
            "name": "LICENSE.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.thoughtworks.paranamer:paranamer:2.8:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thoughtworks:paranamer:2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:paranamer:paranamer:2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.thoughtworks.paranamer.paranamer-2.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "paranamer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.thoughtworks.paranamer"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.thoughtworks.paranamer.paranamer-2.8.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse-conflict-json@4.0.0?package-id=14e81d6fd0ab925d",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "parse-conflict-json",
      "version": "4.0.0",
      "description": "Parse a JSON string that has git merge conflicts, resolving if possible",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse-conflict-json@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/parse-conflict-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict-json:parse_conflict_json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse-conflict-json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse_conflict_json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse-conflict-json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse_conflict_json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse-conflict-json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse_conflict_json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse-conflict-json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse_conflict_json:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse-conflict-json@5.0.1?package-id=e1fd7f9a6243d634",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "parse-conflict-json",
      "version": "5.0.1",
      "description": "Parse a JSON string that has git merge conflicts, resolving if possible",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse-conflict-json@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/parse-conflict-json.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict-json:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict_json:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-conflict:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_conflict:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse-conflict-json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse_conflict_json:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parse-conflict-json@5.0.1/node_modules/parse-conflict-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse-entities@4.0.2?package-id=ac1ff9d1e5f9ee9d",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "parse-entities",
      "version": "4.0.2",
      "description": "Parse HTML character references",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse-entities:parse-entities:4.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse-entities@4.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse-entities:parse_entities:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_entities:parse-entities:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse_entities:parse_entities:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse-entities:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse:parse_entities:4.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parse-entities@4.0.2/node_modules/parse-entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse5@7.3.0?package-id=b6806309dc154e21",
      "type": "library",
      "author": "Ivan Nikulin <ifaaan@gmail.com> (https://github.com/inikulin), https://github.com/inikulin/parse5/graphs/contributors",
      "name": "parse5",
      "version": "7.3.0",
      "description": "HTML parser and serializer.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:inikulin:parse5:7.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse5@7.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/inikulin/parse5.git",
          "type": "distribution"
        },
        {
          "url": "https://parse5.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5:parse5:7.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parse5@7.3.0/node_modules/parse5/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse5-htmlparser2-tree-adapter@7.1.0?package-id=b26b5f5a648505a1",
      "type": "library",
      "author": "Ivan Nikulin <ifaaan@gmail.com> (https://github.com/inikulin), https://github.com/inikulin/parse5/graphs/contributors",
      "name": "parse5-htmlparser2-tree-adapter",
      "version": "7.1.0",
      "description": "htmlparser2 tree adapter for parse5.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse5-htmlparser2-tree-adapter:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse5-htmlparser2-tree-adapter@7.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inikulin/parse5.git",
          "type": "distribution"
        },
        {
          "url": "https://parse5.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-htmlparser2-tree-adapter:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2_tree_adapter:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2_tree_adapter:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-htmlparser2-tree:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-htmlparser2-tree:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2_tree:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2_tree:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-htmlparser2:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-htmlparser2:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_htmlparser2:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inikulin:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inikulin:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5:parse5-htmlparser2-tree-adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5:parse5_htmlparser2_tree_adapter:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parse5-htmlparser2-tree-adapter@7.1.0/node_modules/parse5-htmlparser2-tree-adapter/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parse5-parser-stream@7.1.2?package-id=acc657530fe088c2",
      "type": "library",
      "author": "Ivan Nikulin <ifaaan@gmail.com> (https://github.com/inikulin), https://github.com/inikulin/parse5/graphs/contributors",
      "name": "parse5-parser-stream",
      "version": "7.1.2",
      "description": "Streaming HTML parser with scripting support.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parse5-parser-stream:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parse5-parser-stream@7.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/inikulin/parse5.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/inikulin/parse5",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-parser-stream:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_parser_stream:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_parser_stream:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-parser:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5-parser:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_parser:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5_parser:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inikulin:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inikulin:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5:parse5-parser-stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:parse5:parse5_parser_stream:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parse5-parser-stream@7.1.2/node_modules/parse5-parser-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=c3d3a67beb66481e",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "parseurl",
      "version": "1.3.3",
      "description": "parse a url with memoization",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/parseurl@1.3.3/node_modules/parseurl/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/passwd@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=1853000d374a22b0&upstream=shadow",
      "type": "library",
      "publisher": "Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org>",
      "name": "passwd",
      "version": "1:4.13+dfsg1-1+deb12u2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.13\\+dfsg1-1\\+deb12u2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/passwd@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&upstream=shadow",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/passwd/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/passwd.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/passwd.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/passwd.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/passwd.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/passwd.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/passwd.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/passwd.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2827"
        },
        {
          "name": "syft:metadata:source",
          "value": "shadow"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-data-parser@0.1.0?package-id=e1ee07c502360086",
      "type": "library",
      "author": "Preet Shihn",
      "name": "path-data-parser",
      "version": "0.1.0",
      "description": "Yet another SVG path parser. This one's tiny",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-data-parser:path-data-parser:0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-data-parser@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pshihn/path-data-parser.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pshihn/path-data-parser#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-data-parser:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_data_parser:path-data-parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_data_parser:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-data:path-data-parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-data:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_data:path-data-parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_data:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:path-data-parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-data-parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_data_parser:0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-data-parser@0.1.0/node_modules/path-data-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=549f0448f880aadf",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-is-absolute@1.0.1/node_modules/path-is-absolute/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-key@3.1.1?package-id=4801c08276984bc2",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-key@3.1.1/node_modules/path-key/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-key@3.1.1?package-id=a688c85a79a7f906",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/path-key/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-key@3.1.1?package-id=aa5405b6d91f69ad",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/path-key/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-scurry@1.11.1?package-id=2001027d394e02d5",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-scurry@1.11.1/node_modules/path-scurry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-scurry@1.11.1?package-id=dd7cfebdae20d53b",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/path-scurry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-scurry@1.11.1?package-id=5bb11def864bdf40",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/path-scurry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-scurry@2.0.2?package-id=3e87897f4920bd3c",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
      "name": "path-scurry",
      "version": "2.0.2",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:path-scurry:path-scurry:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/path-scurry@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path-scurry:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path-scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path_scurry:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path-scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:path:path_scurry:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-scurry@2.0.2/node_modules/path-scurry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/path-to-regexp@0.1.12?package-id=8079ae4dec3c37f0",
      "type": "library",
      "name": "path-to-regexp",
      "version": "0.1.12",
      "description": "Express style path to RegExp utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pillarjs:path-to-regexp:0.1.12:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/path-to-regexp@0.1.12",
      "externalReferences": [
        {
          "url": "https://github.com/pillarjs/path-to-regexp.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/path-to-regexp@0.1.12/node_modules/path-to-regexp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pathe@1.1.2?package-id=50f591a7ccd449d7",
      "type": "library",
      "name": "pathe",
      "version": "1.1.2",
      "description": "Universal filesystem path utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pathe:pathe:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pathe@1.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pathe@1.1.2/node_modules/pathe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pathe@2.0.3?package-id=21ed130e424c95e6",
      "type": "library",
      "name": "pathe",
      "version": "2.0.3",
      "description": "Universal filesystem path utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pathe:pathe:2.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pathe@2.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pathe@2.0.3/node_modules/pathe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pathval@2.0.1?package-id=776e971d4aa9ad76",
      "type": "library",
      "author": "Veselin Todorov <hi@vesln.com>",
      "name": "pathval",
      "version": "2.0.1",
      "description": "Object value retrieval given a string path",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chaijis:pathval:2.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/pathval@2.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/pathval.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/chaijs/pathval",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pathval@2.0.1/node_modules/pathval/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=c2ffac71b5caccb3",
      "type": "library",
      "author": "Braveg1rl <braveg1rl@outlook.com>",
      "name": "performance-now",
      "version": "2.1.0",
      "description": "Implements performance.now (based on process.hrtime).",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/braveg1rl/performance-now.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/braveg1rl/performance-now",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:performance-now:performance_now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:performance_now:performance-now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:performance_now:performance_now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:performance:performance-now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:performance:performance_now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:braveg1rl:performance-now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:braveg1rl:performance_now:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/performance-now@2.1.0/node_modules/performance-now/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=e272b8e8d5eb9292&upstream=perl",
      "type": "library",
      "publisher": "Niko Tyni <ntyni@debian.org>",
      "name": "perl-base",
      "version": "5.36.0-7+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0"
          }
        },
        {
          "license": {
            "id": "Artistic-dist"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-1.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Zlib"
          }
        },
        {
          "license": {
            "name": "Artistic"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-GENERIC"
          }
        },
        {
          "license": {
            "name": "BSD-3-clause-with-weird-numbering"
          }
        },
        {
          "license": {
            "name": "BSD-4-clause-POWERDOG"
          }
        },
        {
          "license": {
            "name": "BZIP"
          }
        },
        {
          "license": {
            "name": "DONT-CHANGE-THE-GPL"
          }
        },
        {
          "license": {
            "name": "Expat"
          }
        },
        {
          "license": {
            "name": "GPL-3+-WITH-BISON-EXCEPTION"
          }
        },
        {
          "license": {
            "name": "HSIEH-BSD"
          }
        },
        {
          "license": {
            "name": "HSIEH-DERIVATIVE"
          }
        },
        {
          "license": {
            "name": "REGCOMP"
          }
        },
        {
          "license": {
            "name": "REGCOMP,"
          }
        },
        {
          "license": {
            "name": "RRA-KEEP-THIS-NOTICE"
          }
        },
        {
          "license": {
            "name": "SDBM-PUBLIC-DOMAIN"
          }
        },
        {
          "license": {
            "name": "TEXT-TABS"
          }
        },
        {
          "license": {
            "name": "Unicode"
          }
        }
      ],
      "cpe": "cpe:2.3:a:perl-base:perl-base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=perl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:perl-base:perl_base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:perl_base:perl-base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:perl_base:perl_base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:perl:perl-base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:perl:perl_base:5.36.0-7\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/perl-base/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/perl-base.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/perl-base.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/perl-base.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/perl-base.postrm"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/perl-base.preinst"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/perl-base.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "7639"
        },
        {
          "name": "syft:metadata:source",
          "value": "perl"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/php2atom_3@2.5.24?package-id=ca619ed6d1c2f561",
      "type": "library",
      "name": "php2atom_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:php2atom-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/php2atom_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "04f73d62c9855a22992651e5f35ce75e7896a9c1"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:php2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom-3:php2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom-3:php2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom_3:php2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom_3:php2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:php2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:php2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom:php2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:php2atom:php2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.php2atom_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.php2atom_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/picocolors@1.1.1?package-id=26d566d12590d38d",
      "type": "library",
      "author": "Alexey Raspopov",
      "name": "picocolors",
      "version": "1.1.1",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:picocolors:picocolors:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/picomatch@4.0.3?package-id=5a4c8edb6f608601",
      "type": "library",
      "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
      "name": "picomatch",
      "version": "4.0.3",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/picomatch@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/micromatch/picomatch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/picomatch@4.0.3/node_modules/picomatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/picomatch@4.0.3?package-id=2aad2d505f241669",
      "type": "library",
      "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
      "name": "picomatch",
      "version": "4.0.3",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/picomatch@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/micromatch/picomatch",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/picomatch/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pkg-types@1.3.1?package-id=e414300287fe97ce",
      "type": "library",
      "name": "pkg-types",
      "version": "1.3.1",
      "description": "Node.js utilities and TypeScript definitions for `package.json` and `tsconfig.json`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pkg-types:pkg-types:1.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pkg-types@1.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg-types:pkg_types:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg_types:pkg-types:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg_types:pkg_types:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg:pkg-types:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg:pkg_types:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pkg-types@1.3.1/node_modules/pkg-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pkg-types@2.3.0?package-id=ae3030168e898b43",
      "type": "library",
      "name": "pkg-types",
      "version": "2.3.0",
      "description": "Node.js utilities and TypeScript definitions for `package.json` and `tsconfig.json`",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pkg-types:pkg-types:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pkg-types@2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg-types:pkg_types:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg_types:pkg-types:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg_types:pkg_types:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg:pkg-types:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkg:pkg_types:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pkg-types@2.3.0/node_modules/pkg-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pnpm@10.18.1?package-id=a1a085a1a9e150b0",
      "type": "library",
      "name": "pnpm",
      "version": "10.18.1",
      "description": "Fast, disk space efficient package manager",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:pnpm:pnpm:10.18.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/pnpm@10.18.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pnpm/pnpm.git",
          "type": "distribution"
        },
        {
          "url": "https://pnpm.io",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/points-on-curve@0.2.0?package-id=77e6023c37ff0496",
      "type": "library",
      "author": "Preet Shihn",
      "name": "points-on-curve",
      "version": "0.2.0",
      "description": "Estimate points on a bezier curve or a set of connexted bezier curves",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:points-on-curve:points-on-curve:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/points-on-curve@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pshihn/bezier-points.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pshihn/bezier-points#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on-curve:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on_curve:points-on-curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on_curve:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on:points-on-curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on:points-on-curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points:points-on-curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:points-on-curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:points_on_curve:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/points-on-curve@0.2.0/node_modules/points-on-curve/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/points-on-path@0.2.1?package-id=7f38c14a50ed3e16",
      "type": "library",
      "author": "Preet Shihn",
      "name": "points-on-path",
      "version": "0.2.1",
      "description": "Estimate points on a SVG path",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:points-on-path:points-on-path:0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/points-on-path@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pshihn/points-on-path.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/pshihn/points-on-path#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on-path:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on_path:points-on-path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on_path:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on:points-on-path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points-on:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on:points-on-path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points_on:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points:points-on-path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:points:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:points-on-path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pshihn:points_on_path:0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/points-on-path@0.2.1/node_modules/points-on-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/postcss@8.5.6?package-id=a058b781d87794fc",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "postcss",
      "version": "8.5.6",
      "description": "Tool for transforming styles with JS plugins",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:postcss:postcss:8.5.6:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/postcss@8.5.6",
      "externalReferences": [
        {
          "url": "https://postcss.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/postcss@8.5.6/node_modules/postcss/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=6476fe2c24a5a9e5",
      "type": "library",
      "author": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info), Chris Eppstein <chris@eppsteins.net> (http://twitter.com/chriseppstein)",
      "name": "postcss-selector-parser",
      "version": "6.0.10",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:npm/postcss-selector-parser@6.0.10",
      "externalReferences": [
        {
          "url": "https://github.com/postcss/postcss-selector-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/postcss-selector-parser@6.0.10/node_modules/postcss-selector-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/postcss-selector-parser@7.1.1?package-id=d3aa46afee261ccb",
      "type": "library",
      "author": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info), Chris Eppstein <chris@eppsteins.net> (http://twitter.com/chriseppstein)",
      "name": "postcss-selector-parser",
      "version": "7.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/postcss-selector-parser@7.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/postcss/postcss-selector-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-selector:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_selector:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss-selector-parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss_selector_parser:7.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/postcss-value-parser@4.2.0?package-id=e9cc46ac6880d77b",
      "type": "library",
      "author": "Bogdan Chadkin <trysound@yandex.ru>",
      "name": "postcss-value-parser",
      "version": "4.2.0",
      "description": "Transforms css values and at-rule params into the tree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:postcss-value-parser:postcss-value-parser:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/postcss-value-parser@4.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/TrySound/postcss-value-parser.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TrySound/postcss-value-parser",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-value-parser:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_value_parser:postcss-value-parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_value_parser:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-value:postcss-value-parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss-value:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_value:postcss-value-parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss_value:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TrySound:postcss-value-parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TrySound:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss-value-parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postcss:postcss_value_parser:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/postcss-value-parser@4.2.0/node_modules/postcss-value-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/prebuild-install@7.1.3?package-id=d8c5fabc357eeb73",
      "type": "library",
      "author": "Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)",
      "name": "prebuild-install",
      "version": "7.1.3",
      "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/prebuild-install@7.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/prebuild/prebuild-install.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/prebuild/prebuild-install",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/prebuild-install@7.1.3/node_modules/prebuild-install/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/prettier@3.6.2?package-id=e08db36552d167be",
      "type": "library",
      "author": "James Long",
      "name": "prettier",
      "version": "3.6.2",
      "description": "Prettier is an opinionated code formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:prettier:prettier:3.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/prettier@3.6.2",
      "externalReferences": [
        {
          "url": "https://prettier.io",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/prettier@3.6.2/node_modules/prettier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proc-log@5.0.0?package-id=37b6fc84d5e2cf15",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "proc-log",
      "version": "5.0.0",
      "description": "just emit 'log' events on the process object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proc-log@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proc-log.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/proc-log/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proc-log@5.0.0?package-id=fa0095f3febe734d",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "proc-log",
      "version": "5.0.0",
      "description": "just emit 'log' events on the process object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proc-log@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proc-log.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/proc-log@5.0.0/node_modules/proc-log/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proc-log@5.0.0?package-id=15a3f77fd88e89f8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "proc-log",
      "version": "5.0.0",
      "description": "just emit 'log' events on the process object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proc-log@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proc-log.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/proc-log/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proc-log@6.1.0?package-id=21a18fea484aa3fa",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "proc-log",
      "version": "6.1.0",
      "description": "just emit 'log' events on the process object",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proc-log:proc-log:6.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proc-log@6.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proc-log.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/proc-log@6.1.0/node_modules/proc-log/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=453d453ad48b9035",
      "type": "library",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:calvinmetcalf:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:calvinmetcalf:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/process-nextick-args@2.0.1/node_modules/process-nextick-args/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proggy@3.0.0?package-id=1d7f93e1ddfaf9b4",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "proggy",
      "version": "3.0.0",
      "description": "Progress bar updates at a distance",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proggy:proggy:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proggy@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/proggy.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/proggy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=1bf3a07bda5bb6c3",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "promise-all-reject-late",
      "version": "1.0.1",
      "description": "Like Promise.all, but save rejections until all promises are resolved",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-all-reject-late@1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject-late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject_late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject_late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all-reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all_reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promise-call-limit@3.0.2?package-id=a3a0cd8000fbbd4a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "promise-call-limit",
      "version": "3.0.2",
      "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-call-limit@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/promise-call-limit",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call-limit:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call_limit:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call_limit:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-call:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_call:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-call-limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_call_limit:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=9b24a0921fed1b88",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "promise-retry",
      "version": "2.0.1",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-retry@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/node-promise-retry.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/promise-retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=2113869afbef23aa",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "promise-retry",
      "version": "2.0.1",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-retry@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/node-promise-retry.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/promise-retry@2.0.1/node_modules/promise-retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=38a6b0b4840bc5e3",
      "type": "library",
      "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
      "name": "promise-retry",
      "version": "2.0.1",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promise-retry@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/node-promise-retry.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/promise-retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/promzard@2.0.0?package-id=ffbdf5684af335da",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "promzard",
      "version": "2.0.0",
      "description": "prompting wizardly",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:promzard:promzard:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/promzard@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/promzard.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/promzard/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/prop-types@15.8.1?package-id=91e2929c79df902a",
      "type": "library",
      "name": "prop-types",
      "version": "15.8.1",
      "description": "Runtime type checking for React props and similar objects.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:prop-types:prop-types:15.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/prop-types@15.8.1",
      "externalReferences": [
        {
          "url": "https://facebook.github.io/react/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prop-types:prop_types:15.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prop_types:prop-types:15.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prop_types:prop_types:15.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prop:prop-types:15.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prop:prop_types:15.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/prop-types@15.8.1/node_modules/prop-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/property-information@6.5.0?package-id=55bee2037cc2f699",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Dustin Deus <deusdustin@gmail.com> (http://starptech.de), Andrew Burgess <andrew@andrewburgess.io>",
      "name": "property-information",
      "version": "6.5.0",
      "description": "Info on the properties and attributes of the web platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:property-information:property-information:6.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/property-information@6.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property-information:property_information:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property_information:property-information:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property_information:property_information:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property:property-information:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property:property_information:6.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/property-information@6.5.0/node_modules/property-information/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/property-information@7.1.0?package-id=b5663b7f9a1322fe",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Andrew Burgess <andrew@andrewburgess.io>, Dustin Deus <deusdustin@gmail.com> (http://starptech.de), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "property-information",
      "version": "7.1.0",
      "description": "Info on the properties and attributes of the web platform",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:property-information:property-information:7.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/property-information@7.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property-information:property_information:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property_information:property-information:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property_information:property_information:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property:property-information:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:property:property_information:7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/property-information@7.1.0/node_modules/property-information/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.25.8?package-id=b4dc0ddb632d5323",
      "type": "library",
      "name": "protobuf-java",
      "version": "3.25.8",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:com.google.protobuf:protobuf-java:3.25.8:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.25.8",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2ba593767658038775b2ea9724c3686609874470"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.protobuf:protobuf_java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.protobuf:protobuf:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf-java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.25.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.protobuf.protobuf-java-3.25.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.google.protobuf.protobuf-java-3.25.8.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/protobufjs@7.6.5?package-id=b31b8aae12de501e",
      "type": "library",
      "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
      "name": "protobufjs",
      "version": "7.6.5",
      "description": "Protocol Buffers for JavaScript (& TypeScript).",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:protobufjs_project:protobufjs:7.6.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/protobufjs@7.6.5",
      "externalReferences": [
        {
          "url": "https://protobufjs.github.io/protobuf.js/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/protobufjs@7.6.5/node_modules/protobufjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=bd33962132a87fb2",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "proxy-addr",
      "version": "2.0.7",
      "description": "Determine address of proxied request",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/proxy-addr@2.0.7/node_modules/proxy-addr/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/proxy-from-env@1.1.0?package-id=d0fae174a6f05869",
      "type": "library",
      "author": "Rob Wu <rob@robwu.nl> (https://robwu.nl/)",
      "name": "proxy-from-env",
      "version": "1.1.0",
      "description": "Offers getProxyForUrl to get the proxy URL for a URL, respecting the *_PROXY (e.g. HTTP_PROXY) and NO_PROXY environment variables.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:proxy-from-env:proxy-from-env:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/proxy-from-env@1.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/Rob--W/proxy-from-env.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Rob--W/proxy-from-env#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy-from-env:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_from_env:proxy-from-env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_from_env:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy-from:proxy-from-env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy-from:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_from:proxy-from-env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy_from:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Rob--W:proxy-from-env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Rob--W:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy-from-env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy_from_env:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/proxy-from-env@1.1.0/node_modules/proxy-from-env/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/pump@3.0.4?package-id=ebb6dbf94a0b9d8e",
      "type": "library",
      "author": "Mathias Buus Madsen <mathiasbuus@gmail.com>",
      "name": "pump",
      "version": "3.0.4",
      "description": "pipe streams together and close all of them if one of them closes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mafintosh:pump:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/pump@3.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/pump.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pump:pump:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pump@3.0.4/node_modules/pump/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/punycode@2.3.1?package-id=67404e403e736574",
      "type": "library",
      "author": "Mathias Bynens (https://mathiasbynens.be/), Mathias Bynens (https://mathiasbynens.be/)",
      "name": "punycode",
      "version": "2.3.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mathiasbynens:punycode:2.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/mathiasbynens/punycode.js.git",
          "type": "distribution"
        },
        {
          "url": "https://mths.be/punycode",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:punycode:punycode:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/punycode@2.3.1/node_modules/punycode/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/pysrc2cpg_3@2.5.24?package-id=49bac621a7f08764",
      "type": "library",
      "name": "pysrc2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:pysrc2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/pysrc2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "80ac845f2169decd7eaf13f4124849f9fd4c0ad5"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:pysrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg-3:pysrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg-3:pysrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg_3:pysrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg_3:pysrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:pysrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:pysrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg:pysrc2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pysrc2cpg:pysrc2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.pysrc2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.pysrc2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=70ddce9567b55fbd",
      "type": "library",
      "author": "Gord Tanner <gtanner@gmail.com> (http://github.com/gtanner), Michael Brooks <mikeywbrooks@gmail.com> (http://github.com/mwbrooks)",
      "name": "qrcode-terminal",
      "version": "0.12.0",
      "description": "QRCodes, in the terminal",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/qrcode-terminal@0.12.0",
      "externalReferences": [
        {
          "url": "https://github.com/gtanner/qrcode-terminal",
          "type": "distribution"
        },
        {
          "url": "https://github.com/gtanner/qrcode-terminal",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode-terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode_terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode_terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gtanner:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gtanner:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode:qrcode-terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qrcode:qrcode_terminal:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/qs@6.13.0?package-id=0d9e140c4d419ae8",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
      "name": "qs",
      "version": "6.13.0",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:qs_project:qs:6.13.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/qs@6.13.0",
      "externalReferences": [
        {
          "url": "https://github.com/ljharb/qs.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/qs",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/qs@6.13.0/node_modules/qs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/qs@6.15.3?package-id=0c63eca11494081d",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
      "name": "qs",
      "version": "6.15.3",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:qs_project:qs:6.15.3:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/qs@6.15.3",
      "externalReferences": [
        {
          "url": "https://github.com/ljharb/qs.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/qs",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/qs@6.15.3/node_modules/qs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/quansync@0.2.11?package-id=9e8c8364eeec8a79",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>, 三咲智子 Kevin Deng <sxzz@sxzz.moe>",
      "name": "quansync",
      "version": "0.2.11",
      "description": "Create sync/async APIs with usable logic",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:quansync-dev:quansync:0.2.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/quansync@0.2.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/quansync-dev/quansync.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/quansync-dev/quansync#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:quansync:quansync:0.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/quansync@0.2.11/node_modules/quansync/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/raf@3.4.1?package-id=5a12de25996a21c5",
      "type": "library",
      "author": "Chris Dickinson <chris@neversaw.us>, Christian Maughan Tegnér <christian.tegner@gmail.com>",
      "name": "raf",
      "version": "3.4.1",
      "description": "requestAnimationFrame polyfill for node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:chrisdickinson:raf:3.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/raf@3.4.1",
      "externalReferences": [
        {
          "url": "git://github.com/chrisdickinson/raf.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raf:raf:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/raf@3.4.1/node_modules/raf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/railroad-diagrams@1.0.0?package-id=3aa98798a8a3ab83",
      "type": "library",
      "author": "Tab Atkins Jr.",
      "name": "railroad-diagrams",
      "version": "1.0.0",
      "description": "A small JS+SVG library for drawing railroad syntax diagrams.",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:railroad-diagrams:railroad-diagrams:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/railroad-diagrams@1.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/tabatkins/railroad-diagrams.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tabatkins/railroad-diagrams",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:railroad-diagrams:railroad_diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:railroad_diagrams:railroad-diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:railroad_diagrams:railroad_diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tabatkins:railroad-diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tabatkins:railroad_diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:railroad:railroad-diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:railroad:railroad_diagrams:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/railroad-diagrams@1.0.0/node_modules/railroad-diagrams/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/randexp@0.4.6?package-id=c7147a1ec1c23fcf",
      "type": "library",
      "author": "Roly Fentanes (https://github.com/fent)",
      "name": "randexp",
      "version": "0.4.6",
      "description": "Create random strings that match a given regular expression.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:randexp:randexp:0.4.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/randexp@0.4.6",
      "externalReferences": [
        {
          "url": "git://github.com/fent/randexp.js.git",
          "type": "distribution"
        },
        {
          "url": "http://fent.github.io/randexp.js/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fent:randexp:0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/randexp@0.4.6/node_modules/randexp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=5cc2e50afc37be20",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <wyatt.cready@lanetix.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "range-parser",
      "version": "1.2.1",
      "description": "Range header field string parser",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/range-parser@1.2.1/node_modules/range-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/raw-body@2.5.2?package-id=68531bc1959ca306",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Raynos <raynos2@gmail.com>",
      "name": "raw-body",
      "version": "2.5.2",
      "description": "Get and validate the raw body of a readable stream.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:raw-body:raw-body:2.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/raw-body@2.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw-body:raw_body:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw_body:raw-body:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw_body:raw_body:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw:raw-body:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw:raw_body:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/raw-body@2.5.2/node_modules/raw-body/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/raw-body@3.0.2?package-id=d3af80f37dfbe608",
      "type": "library",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Raynos <raynos2@gmail.com>",
      "name": "raw-body",
      "version": "3.0.2",
      "description": "Get and validate the raw body of a readable stream.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:raw-body:raw-body:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/raw-body@3.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw-body:raw_body:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw_body:raw-body:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw_body:raw_body:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw:raw-body:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:raw:raw_body:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/raw-body@3.0.2/node_modules/raw-body/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rc@1.2.8?package-id=27dfa5ce10a46894",
      "type": "library",
      "author": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)",
      "name": "rc",
      "version": "1.2.8",
      "description": "hardwired configuration loader",
      "licenses": [
        {
          "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
        }
      ],
      "cpe": "cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rc@1.2.8",
      "externalReferences": [
        {
          "url": "https://github.com/dominictarr/rc.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rc@1.2.8/node_modules/rc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react@19.2.1?package-id=914725986fe6d2a5",
      "type": "library",
      "name": "react",
      "version": "19.2.1",
      "description": "React is a JavaScript library for building user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:facebook:react:19.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react@19.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://react.dev/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react@19.2.1/node_modules/react/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-day-picker@9.11.1?package-id=ea745faa2bd1e05f",
      "type": "library",
      "author": "Giampaolo Bellavite <io@gpbl.dev>",
      "name": "react-day-picker",
      "version": "9.11.1",
      "description": "Customizable Date Picker for React",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-day-picker:react-day-picker:9.11.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-day-picker@9.11.1",
      "externalReferences": [
        {
          "url": "https://github.com/gpbl/react-day-picker",
          "type": "distribution"
        },
        {
          "url": "https://daypicker.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-day-picker:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_day_picker:react-day-picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_day_picker:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-day:react-day-picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-day:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_day:react-day-picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_day:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-day-picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpbl:react-day-picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpbl:react_day_picker:9.11.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-day-picker@9.11.1_react@19.2.1/node_modules/react-day-picker/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-dom@19.2.1?package-id=48d1b2a33afde9bb",
      "type": "library",
      "name": "react-dom",
      "version": "19.2.1",
      "description": "React package for working with the DOM.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-dom:react-dom:19.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-dom@19.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://react.dev/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-dom:react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_dom:react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_dom:react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_dom:19.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-dom@19.2.1_react@19.2.1/node_modules/react-dom/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-hook-form@7.64.0?package-id=56456703b763825d",
      "type": "library",
      "name": "react-hook-form",
      "version": "7.64.0",
      "description": "Performant, flexible and extensible forms library for React Hooks",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-hook-form:react-hook-form:7.64.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-hook-form@7.64.0",
      "externalReferences": [
        {
          "url": "https://github.com/react-hook-form/react-hook-form",
          "type": "distribution"
        },
        {
          "url": "https://react-hook-form.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-hook-form:react_hook_form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_hook_form:react-hook-form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_hook_form:react_hook_form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-hook:react-hook-form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-hook:react_hook_form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_hook:react-hook-form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_hook:react_hook_form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-hook-form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_hook_form:7.64.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-hook-form@7.64.0_react@19.2.1/node_modules/react-hook-form/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-is@16.13.1?package-id=6bf23f24f9b2d16a",
      "type": "library",
      "name": "react-is",
      "version": "16.13.1",
      "description": "Brand checking of React Elements.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:facebook:react-is:16.13.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-is@16.13.1",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://reactjs.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react_is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-is:react-is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-is:react_is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_is:react-is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_is:react_is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_is:16.13.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-is@16.13.1/node_modules/react-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-is@18.3.1?package-id=cbed82043535df32",
      "type": "library",
      "name": "react-is",
      "version": "18.3.1",
      "description": "Brand checking of React Elements.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:facebook:react-is:18.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-is@18.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://reactjs.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react_is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-is:react-is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-is:react_is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_is:react-is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_is:react_is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_is:18.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-is@18.3.1/node_modules/react-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-markdown@10.1.0?package-id=f531604b4f786ca5",
      "type": "library",
      "author": "Espen Hovlandsdal <espen@hovlandsdal.com>, Alexander Wallin <office@alexanderwallin.com>, Alexander Wong <admin@alexander-wong.com>, André Staltz <andre@staltz.com>, Angus MacIsaac <angus.macisaac@busbud.com>, Beau Roberts <beau.roberts@autodesk.com>, Charlie Chen <doveccl@live.com>, Christian Murphy <christian.murphy.42@gmail.com>, Christoph Werner <christoph@codepunkt.de>, Danny <dannyharding10@gmail.com>, Dennis S <denis.s@svsg.co>, Espen Hovlandsdal <espen@hovlandsdal.com>, Evan Hensleigh <futuraprime@gmail.com>, Fabian Irsara <info@fabianirsara.com>, Florentin Luca Rieger <florentin.rieger@gmail.com>, Frank <frankieali4@gmail.com>, Igor Kamyshev <garik.novel@gmail.com>, Jack Williams <jsw547@gmail.com>, Jakub Chrzanowski <jakub@chrzanowski.info>, Jeremy Moseley <jeremy@jeremymoseley.net>, Jesse Pinho <jesse@jessepinho.com>, Kelvin Chan <kchan@securitycompass.com>, Kohei Asai <me@axross.io>, Linus Unnebäck <linus@folkdatorn.se>, Marshall Smith <marshall@radialdevgroup.com>, Nathan Bierema <nbierema@gmail.com>, Nicolas Venegas <nvenegas@atlassian.com>, Peng Guanwen <pg999w@outlook.com>, Petr Gazarov <petrgazarov@gmail.com>, Phil Rajchgot <tophil@outlook.com>, Rasmus Eneman <rasmus@eneman.eu>, René Kooi <renee@kooi.me>, Riku Rouvila <riku.rouvila@gmail.com>, Robin Wieruch <wrobin@gmx.net>, Rostyslav Melnychuk <blackswordgc@gmail.com>, Ted Piotrowski <tppiotrowski@gmail.com>, Thibaud Courtoison <do.not.press.enter@gmail.com>, Thomas Lindstrøm <t@hom.as>, Tiago Roldão <focus5.6@gmail.com>, Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), cerkiewny <mstarzycki@gmail.com>, evoye <rosej@gmx.net>, gRoberts84 <gavin@gav-roberts.co.uk>, mudrz <mudrz@outlook.com>, vanchagreen <vanchagreen@gmail.com>",
      "name": "react-markdown",
      "version": "10.1.0",
      "description": "React component to render markdown",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-markdown:react-markdown:10.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-markdown@10.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-markdown:react_markdown:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_markdown:react-markdown:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_markdown:react_markdown:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-markdown:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_markdown:10.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-markdown@10.1.0_@types+react@19.2.1_react@19.2.1/node_modules/react-markdown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-refresh@0.17.0?package-id=893597697b76a064",
      "type": "library",
      "name": "react-refresh",
      "version": "0.17.0",
      "description": "React is a JavaScript library for building user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-refresh:react-refresh:0.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-refresh@0.17.0",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://react.dev/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-refresh:react_refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_refresh:react-refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_refresh:react_refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react-refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:react_refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_refresh:0.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-refresh@0.17.0/node_modules/react-refresh/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-remove-scroll@2.7.1?package-id=a31dfbfbcc359b92",
      "type": "library",
      "author": "Anton Korzunov <thekashey@gmail.com>",
      "name": "react-remove-scroll",
      "version": "2.7.1",
      "description": "Disables scroll outside of `children` node.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-remove-scroll:react-remove-scroll:2.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-remove-scroll@2.7.1",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/react-remove-scroll",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove-scroll:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll:react-remove-scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove:react-remove-scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove:react-remove-scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react-remove-scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-remove-scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_remove_scroll:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-remove-scroll@2.7.1_@types+react@19.2.1_react@19.2.1/node_modules/react-remove-scroll/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-remove-scroll-bar@2.3.8?package-id=f9e8513edfba47e9",
      "type": "library",
      "author": "Anton Korzunov <thekashey@gmail.com>",
      "name": "react-remove-scroll-bar",
      "version": "2.3.8",
      "description": "Removes body scroll without content _shake_",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-remove-scroll-bar:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-remove-scroll-bar@2.3.8",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/react-remove-scroll-bar",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove-scroll-bar:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll_bar:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll_bar:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove-scroll:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove-scroll:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove_scroll:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-remove:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_remove:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-remove-scroll-bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_remove_scroll_bar:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-remove-scroll-bar@2.3.8_@types+react@19.2.1_react@19.2.1/node_modules/react-remove-scroll-bar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-resizable-panels@3.0.6?package-id=a3ce08bf022b89d8",
      "type": "library",
      "author": "Brian Vaughn <brian.david.vaughn@gmail.com>",
      "name": "react-resizable-panels",
      "version": "3.0.6",
      "description": "React components for resizable panel groups/layouts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-resizable-panels:react-resizable-panels:3.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-resizable-panels@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/bvaughn/react-resizable-panels.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-resizable-panels:react_resizable_panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_resizable_panels:react-resizable-panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_resizable_panels:react_resizable_panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-resizable:react-resizable-panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-resizable:react_resizable_panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_resizable:react-resizable-panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_resizable:react_resizable_panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-resizable-panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_resizable_panels:3.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-resizable-panels@3.0.6_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-resizable-panels/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-smooth@4.0.4?package-id=3a958d7dddd3ef77",
      "type": "library",
      "author": "JasonHzq",
      "name": "react-smooth",
      "version": "4.0.4",
      "description": "react animation library",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-smooth:react-smooth:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-smooth@4.0.4",
      "externalReferences": [
        {
          "url": "https://github.com/recharts/react-smooth.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/recharts/react-smooth#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-smooth:react_smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_smooth:react-smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_smooth:react_smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts:react-smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts:react_smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_smooth:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-smooth@4.0.4_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-smooth/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-style-singleton@2.2.3?package-id=b03b1658e8f7cc9b",
      "type": "library",
      "author": "Anton Korzunov (thekashey@gmail.com)",
      "name": "react-style-singleton",
      "version": "2.2.3",
      "description": "Just create a single stylesheet...",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-style-singleton:react-style-singleton:2.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-style-singleton@2.2.3",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/react-style-singleton",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theKashey/react-style-singleton#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-style-singleton:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_style_singleton:react-style-singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_style_singleton:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-style:react-style-singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-style:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_style:react-style-singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_style:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react-style-singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-style-singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_style_singleton:2.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-style-singleton@2.2.3_@types+react@19.2.1_react@19.2.1/node_modules/react-style-singleton/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group@4.4.5?package-id=a365639c3d46b43a",
      "type": "library",
      "name": "react-transition-group",
      "version": "4.4.5",
      "description": "A react component toolset for managing animations",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:react-transition-group:react-transition-group:4.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group@4.4.5",
      "externalReferences": [
        {
          "url": "https://github.com/reactjs/react-transition-group.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/reactjs/react-transition-group#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group:react-transition-group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactjs:react-transition-group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactjs:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group:4.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/csstransition?package-id=c377521eb695aaaf",
      "type": "library",
      "name": "react-transition-group/CSSTransition",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/CSSTransition:react-transition-group\\/CSSTransition:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/CSSTransition",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/CSSTransition:react_transition_group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/CSSTransition:react-transition-group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/CSSTransition:react_transition_group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/CSSTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/CSSTransition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/replacetransition?package-id=da1f4a300aec8e11",
      "type": "library",
      "name": "react-transition-group/ReplaceTransition",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/ReplaceTransition:react-transition-group\\/ReplaceTransition:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/ReplaceTransition",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/ReplaceTransition:react_transition_group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/ReplaceTransition:react-transition-group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/ReplaceTransition:react_transition_group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/ReplaceTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/ReplaceTransition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/switchtransition?package-id=8929ba7d1efdafae",
      "type": "library",
      "name": "react-transition-group/SwitchTransition",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/SwitchTransition:react-transition-group\\/SwitchTransition:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/SwitchTransition",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/SwitchTransition:react_transition_group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/SwitchTransition:react-transition-group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/SwitchTransition:react_transition_group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/SwitchTransition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/SwitchTransition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/transition?package-id=4b46653ebce3eea5",
      "type": "library",
      "name": "react-transition-group/Transition",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/Transition:react-transition-group\\/Transition:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/Transition",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/Transition:react_transition_group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/Transition:react-transition-group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/Transition:react_transition_group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/Transition:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/Transition/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/transitiongroup?package-id=cab3ccd46ad02cb5",
      "type": "library",
      "name": "react-transition-group/TransitionGroup",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/TransitionGroup:react-transition-group\\/TransitionGroup:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/TransitionGroup",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/TransitionGroup:react_transition_group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/TransitionGroup:react-transition-group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/TransitionGroup:react_transition_group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/TransitionGroup:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/TransitionGroup/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/transitiongroupcontext?package-id=0ae1b9fb1d9828e7",
      "type": "library",
      "name": "react-transition-group/TransitionGroupContext",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/TransitionGroupContext:react-transition-group\\/TransitionGroupContext:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/TransitionGroupContext",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/TransitionGroupContext:react_transition_group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/TransitionGroupContext:react-transition-group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/TransitionGroupContext:react_transition_group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/TransitionGroupContext:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/TransitionGroupContext/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/react-transition-group/config?package-id=59f3754b057aeb21",
      "type": "library",
      "name": "react-transition-group/config",
      "version": "UNKNOWN",
      "cpe": "cpe:2.3:a:react-transition-group\\/config:react-transition-group\\/config:*:*:*:*:*:*:*:*",
      "purl": "pkg:npm/react-transition-group/config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition-group\\/config:react_transition_group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/config:react-transition-group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition_group\\/config:react_transition_group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react-transition-group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react-transition:react_transition_group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react-transition-group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react_transition:react_transition_group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react-transition-group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:react:react_transition_group\\/config:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/react-transition-group@4.4.5_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/react-transition-group/config/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/read@4.1.0?package-id=5b3bfe55f704f670",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "read",
      "version": "4.1.0",
      "description": "read(1) for node programs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read:read:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/read/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/read-cmd-shim@5.0.0?package-id=3b96eabdb7a352a8",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "read-cmd-shim",
      "version": "5.0.0",
      "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read-cmd-shim@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-cmd-shim.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/read-cmd-shim#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd-shim:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd_shim:read-cmd-shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd_shim:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd:read-cmd-shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-cmd:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd:read-cmd-shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_cmd:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read-cmd-shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:read-cmd-shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:read_cmd_shim:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/read-package-json-fast@4.0.0?package-id=4154f67ac4aeaed6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "read-package-json-fast",
      "version": "4.0.0",
      "description": "Like read-package-json, but faster",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read-package-json-fast@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-package-json-fast.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json-fast:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json_fast:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json_fast:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read-package-json-fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read_package_json_fast:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/read-package-json-fast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/read-package-json-fast@5.0.0?package-id=43ceff0abe599649",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "read-package-json-fast",
      "version": "5.0.0",
      "description": "Like read-package-json, but faster",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/read-package-json-fast@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-package-json-fast.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json-fast:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json_fast:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json_fast:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package-json:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package_json:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read-package:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read_package:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read-package-json-fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:read:read_package_json_fast:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/read-package-json-fast@5.0.0/node_modules/read-package-json-fast/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=a553765d1c9da9ec",
      "type": "library",
      "name": "readable-stream",
      "version": "2.3.8",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/readable-stream",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:readable-stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:readable_stream:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/readable-stream@2.3.8/node_modules/readable-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=1cbb36ec14100564",
      "type": "library",
      "name": "readable-stream",
      "version": "3.6.2",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/readable-stream",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/readable-stream@3.6.2/node_modules/readable-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/readdir-glob@1.1.3?package-id=7913f133c4358e69",
      "type": "library",
      "author": "Yann Armelin",
      "name": "readdir-glob",
      "version": "1.1.3",
      "description": "Recursive fs.readdir with streaming API and glob filtering.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:readdir-glob:readdir-glob:1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/readdir-glob@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/Yqnn/node-readdir-glob.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Yqnn/node-readdir-glob",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readdir-glob:readdir_glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readdir_glob:readdir-glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readdir_glob:readdir_glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readdir:readdir-glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:readdir:readdir_glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Yqnn:readdir-glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Yqnn:readdir_glob:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/readdir-glob@1.1.3/node_modules/readdir-glob/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/recharts@2.15.4?package-id=cdcc98cc739f0b74",
      "type": "library",
      "author": "recharts group",
      "name": "recharts",
      "version": "2.15.4",
      "description": "React charts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:recharts:recharts:2.15.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/recharts@2.15.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/recharts/recharts.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/recharts/recharts",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/recharts@2.15.4_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/recharts/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/recharts-scale@0.4.5?package-id=719803b4d741ca67",
      "type": "library",
      "author": "recharts group",
      "name": "recharts-scale",
      "version": "0.4.5",
      "description": "Scale of Cartesian Coordinates",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:recharts-scale:recharts-scale:0.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/recharts-scale@0.4.5",
      "externalReferences": [
        {
          "url": "https://github.com/recharts/recharts-scale.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/recharts/recharts-scale",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts-scale:recharts_scale:0.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts_scale:recharts-scale:0.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts_scale:recharts_scale:0.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts:recharts-scale:0.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:recharts:recharts_scale:0.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/recharts-scale@0.4.5/node_modules/recharts-scale/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/regenerator-runtime@0.13.11?package-id=efd37f18cc8920b5",
      "type": "library",
      "author": "Ben Newman <bn@cs.stanford.edu>",
      "name": "regenerator-runtime",
      "version": "0.13.11",
      "description": "Runtime for Regenerator-compiled generator and async functions.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:regenerator-runtime:regenerator-runtime:0.13.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/regenerator-runtime@0.13.11",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/regenerator/tree/main/packages/runtime",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regenerator-runtime:regenerator_runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regenerator_runtime:regenerator-runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regenerator_runtime:regenerator_runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regenerator:regenerator-runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regenerator:regenerator_runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:regenerator-runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:regenerator_runtime:0.13.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/regenerator-runtime@0.13.11/node_modules/regenerator-runtime/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/regex@6.0.1?package-id=4a4f67d974593155",
      "type": "library",
      "author": "Steven Levithan",
      "name": "regex",
      "version": "6.0.1",
      "description": "Regex template tag with extended syntax, context-aware interpolation, and always-on best practices",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:regex:regex:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/regex@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/slevithan/regex.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/regex@6.0.1/node_modules/regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/regex-recursion@6.0.2?package-id=0b889637ed1cdba8",
      "type": "library",
      "author": "Steven Levithan",
      "name": "regex-recursion",
      "version": "6.0.2",
      "description": "Recursive matching plugin for Regex+",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:regex-recursion:regex-recursion:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/regex-recursion@6.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/slevithan/regex-recursion.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex-recursion:regex_recursion:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex_recursion:regex-recursion:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex_recursion:regex_recursion:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex:regex-recursion:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex:regex_recursion:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/regex-recursion@6.0.2/node_modules/regex-recursion/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/regex-utilities@2.3.0?package-id=7064f65379ace792",
      "type": "library",
      "author": "Steven Levithan",
      "name": "regex-utilities",
      "version": "2.3.0",
      "description": "Tiny helpers for processing regex syntax",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:regex-utilities:regex-utilities:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/regex-utilities@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/slevithan/regex-utilities.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex-utilities:regex_utilities:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex_utilities:regex-utilities:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex_utilities:regex_utilities:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex:regex-utilities:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:regex:regex_utilities:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/regex-utilities@2.3.0/node_modules/regex-utilities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/regexparam@3.0.0?package-id=ab282c4ea0de8277",
      "type": "library",
      "author": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)",
      "name": "regexparam",
      "version": "3.0.0",
      "description": "A tiny (399B) utility that converts route patterns into RegExp. Limited alternative to `path-to-regexp` 🙇‍",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:regexparam:regexparam:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/regexparam@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/regexparam@3.0.0/node_modules/regexparam/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rehype-harden@1.1.5?package-id=a1b7115b002c1698",
      "type": "library",
      "author": "S. Elliott Johnson",
      "name": "rehype-harden",
      "version": "1.1.5",
      "description": "A security-focused rehype plugin that filters URLs based on allowed prefixes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rehype-harden:rehype-harden:1.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rehype-harden@1.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/vercel-labs/markdown-sanitizers.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vercel-labs/markdown-sanitizers#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype-harden:rehype_harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_harden:rehype-harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_harden:rehype_harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vercel-labs:rehype-harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vercel-labs:rehype_harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype-harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype_harden:1.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rehype-harden@1.1.5/node_modules/rehype-harden/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rehype-katex@7.0.1?package-id=20e55b83c7513118",
      "type": "library",
      "author": "Junyoung Choi <fluke8259@gmail.com> (https://rokt33r.github.io), Junyoung Choi <fluke8259@gmail.com> (https://rokt33r.github.io), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "rehype-katex",
      "version": "7.0.1",
      "description": "rehype plugin to transform inline and block math with KaTeX",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rehype-katex:rehype-katex:7.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rehype-katex@7.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/remarkjs/remark-math/tree/main/packages/rehype-katex",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype-katex:rehype_katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_katex:rehype-katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_katex:rehype_katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:rehype-katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:rehype_katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype-katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype_katex:7.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rehype-katex@7.0.1/node_modules/rehype-katex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rehype-raw@7.0.0?package-id=a85735debc45703b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "rehype-raw",
      "version": "7.0.0",
      "description": "rehype plugin to reparse the tree (and raw nodes)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rehype-raw:rehype-raw:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rehype-raw@7.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype-raw:rehype_raw:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_raw:rehype-raw:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype_raw:rehype_raw:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype-raw:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rehype:rehype_raw:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rehype-raw@7.0.0/node_modules/rehype-raw/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/remark-gfm@4.0.1?package-id=924a56af1e0f9eb9",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "remark-gfm",
      "version": "4.0.1",
      "description": "remark plugin to support GFM (autolink literals, footnotes, strikethrough, tables, tasklists)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:remark-gfm:remark-gfm:4.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/remark-gfm@4.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark-gfm:remark_gfm:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_gfm:remark-gfm:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_gfm:remark_gfm:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark-gfm:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark_gfm:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/remark-gfm@4.0.1/node_modules/remark-gfm/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/remark-math@6.0.0?package-id=815a048ba3044ec2",
      "type": "library",
      "author": "Junyoung Choi <fluke8259@gmail.com> (https://rokt33r.github.io), Junyoung Choi <fluke8259@gmail.com> (https://rokt33r.github.io), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "remark-math",
      "version": "6.0.0",
      "description": "remark plugin to parse and stringify math",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:remark-math:remark-math:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/remark-math@6.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/remarkjs/remark-math/tree/main/packages/remark-math",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark-math:remark_math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_math:remark-math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_math:remark_math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark-math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark_math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark-math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark_math:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/remark-math@6.0.0/node_modules/remark-math/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/remark-parse@11.0.0?package-id=3674113735273be0",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Eugene Sharygin <eush77@gmail.com>, Junyoung Choi <fluke8259@gmail.com>, Elijah Hamovitz <elijahhamovitz@gmail.com>, Ika <ikatyang@gmail.com>",
      "name": "remark-parse",
      "version": "11.0.0",
      "description": "remark plugin to add support for parsing markdown input",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:remark-parse:remark-parse:11.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/remark-parse@11.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/remarkjs/remark/tree/main/packages/remark-parse",
          "type": "distribution"
        },
        {
          "url": "https://remark.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark-parse:remark_parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_parse:remark-parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_parse:remark_parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark-parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark_parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark-parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark_parse:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/remark-parse@11.0.0/node_modules/remark-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/remark-rehype@11.1.2?package-id=b852da0f550e4d68",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), John Otander <johnotander@gmail.com> (https://johno.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "remark-rehype",
      "version": "11.1.2",
      "description": "remark plugin that turns markdown into HTML to support rehype",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:remark-rehype:remark-rehype:11.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/remark-rehype@11.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark-rehype:remark_rehype:11.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_rehype:remark-rehype:11.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_rehype:remark_rehype:11.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark-rehype:11.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark_rehype:11.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/remark-rehype@11.1.2/node_modules/remark-rehype/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/remark-stringify@11.0.0?package-id=b82a4684469768b6",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Eugene Sharygin <eush77@gmail.com>",
      "name": "remark-stringify",
      "version": "11.0.0",
      "description": "remark plugin to add support for serializing markdown",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:remark-stringify:remark-stringify:11.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/remark-stringify@11.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/remarkjs/remark/tree/main/packages/remark-stringify",
          "type": "distribution"
        },
        {
          "url": "https://remark.js.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark-stringify:remark_stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_stringify:remark-stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark_stringify:remark_stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark-stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remarkjs:remark_stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark-stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:remark:remark_stringify:11.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/remark-stringify@11.0.0/node_modules/remark-stringify/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=7e9cf84812023ccc",
      "type": "library",
      "author": "Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/), Troy Goode <troygoode@gmail.com>",
      "name": "require-directory",
      "version": "2.1.1",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/troygoode/node-require-directory.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/troygoode/node-require-directory/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:troygoode:require-directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:troygoode:require_directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/require-directory@2.1.1/node_modules/require-directory/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/require-from-string@2.0.2?package-id=88b10ce99bfc4a06",
      "type": "library",
      "author": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)",
      "name": "require-from-string",
      "version": "2.0.2",
      "description": "Require module from string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:require-from-string:require-from-string:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require-from-string:require_from_string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_from_string:require-from-string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_from_string:require_from_string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require-from:require-from-string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require-from:require_from_string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_from:require-from-string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require_from:require_from_string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require:require-from-string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:require:require_from_string:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/require-from-string@2.0.2/node_modules/require-from-string/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/resolve-pkg-maps@1.0.0?package-id=22d0206f97e3c034",
      "type": "library",
      "author": "Hiroki Osame <hiroki.osame@gmail.com>",
      "name": "resolve-pkg-maps",
      "version": "1.0.0",
      "description": "Resolve package.json exports & imports maps",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:resolve-pkg-maps:resolve-pkg-maps:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/resolve-pkg-maps@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve-pkg-maps:resolve_pkg_maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve_pkg_maps:resolve-pkg-maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve_pkg_maps:resolve_pkg_maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve-pkg:resolve-pkg-maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve-pkg:resolve_pkg_maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve_pkg:resolve-pkg-maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve_pkg:resolve_pkg_maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve:resolve-pkg-maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolve:resolve_pkg_maps:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/resolve-pkg-maps@1.0.0/node_modules/resolve-pkg-maps/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ret@0.1.15?package-id=e16da1e92f24f613",
      "type": "library",
      "author": "Roly Fentanes (https://github.com/fent)",
      "name": "ret",
      "version": "0.1.15",
      "description": "Tokenizes a string that represents a regular expression.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:fent:ret:0.1.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "url": "git://github.com/fent/ret.js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ret:ret:0.1.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ret@0.1.15/node_modules/ret/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/retry@0.12.0?package-id=b548bc94e63eded0",
      "type": "library",
      "author": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)",
      "name": "retry",
      "version": "0.12.0",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "url": "git://github.com/tim-kos/node-retry.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tim-kos/node-retry",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/retry@0.12.0?package-id=b77f5f1b545eb6de",
      "type": "library",
      "author": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)",
      "name": "retry",
      "version": "0.12.0",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "url": "git://github.com/tim-kos/node-retry.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tim-kos/node-retry",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/retry@0.12.0/node_modules/retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/retry@0.12.0?package-id=2c24e911fcc81246",
      "type": "library",
      "author": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)",
      "name": "retry",
      "version": "0.12.0",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "url": "git://github.com/tim-kos/node-retry.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tim-kos/node-retry",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/retry/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rgbcolor@1.0.1?package-id=8ff1b98f83772f68",
      "type": "library",
      "author": "Sebastian Vollnhals <sebastian@vollnhals.info>",
      "name": "rgbcolor",
      "version": "1.0.1",
      "description": "A module to parse color values",
      "licenses": [
        {
          "license": {
            "name": "MIT OR SEE LICENSE IN FEEL-FREE.md"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rgbcolor:rgbcolor:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rgbcolor@1.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/yetzt/node-rgbcolor.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yetzt:rgbcolor:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rgbcolor@1.0.1/node_modules/rgbcolor/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=788a09661dc84996",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "rimraf",
      "version": "2.7.1",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/rimraf.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rimraf@2.7.1/node_modules/rimraf/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/robust-predicates@3.0.2?package-id=7623f05b69356d51",
      "type": "library",
      "author": "Vladimir Agafonkin",
      "name": "robust-predicates",
      "version": "3.0.2",
      "description": "Fast robust predicates for computational geometry",
      "licenses": [
        {
          "license": {
            "id": "Unlicense"
          }
        }
      ],
      "cpe": "cpe:2.3:a:robust-predicates:robust-predicates:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/robust-predicates@3.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/mourner/robust-predicates.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:robust-predicates:robust_predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:robust_predicates:robust-predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:robust_predicates:robust_predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mourner:robust-predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mourner:robust_predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:robust:robust-predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:robust:robust_predicates:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/robust-predicates@3.0.2/node_modules/robust-predicates/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rollup@4.52.4?package-id=13e57c60f53402d6",
      "type": "library",
      "author": "Rich Harris",
      "name": "rollup",
      "version": "4.52.4",
      "description": "Next-generation ES module bundler",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rollupjs:rollup:4.52.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/rollup@4.52.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/rollup/rollup.git",
          "type": "distribution"
        },
        {
          "url": "https://rollupjs.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rollup@4.52.4/node_modules/rollup/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/roughjs@4.6.6?package-id=1eb12189c0325e77",
      "type": "library",
      "author": "Preet Shihn <preetshihn@gmail.com>",
      "name": "roughjs",
      "version": "4.6.6",
      "description": "Create graphics using HTML Canvas or SVG with a hand-drawn, sketchy, appearance.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:roughjs:roughjs:4.6.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/roughjs@4.6.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/pshihn/rough.git",
          "type": "distribution"
        },
        {
          "url": "https://roughjs.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/roughjs@4.6.6/node_modules/roughjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rpc-websockets@9.3.9?package-id=0fd805d870cc5d86",
      "type": "library",
      "author": "Elpheria",
      "name": "rpc-websockets",
      "version": "9.3.9",
      "description": "JSON-RPC 2.0 implementation over WebSockets for Node.js",
      "licenses": [
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:rpc-websockets:rpc-websockets:9.3.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rpc-websockets@9.3.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/elpheria/rpc-websockets.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/elpheria/rpc-websockets#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpc-websockets:rpc_websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpc_websockets:rpc-websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpc_websockets:rpc_websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elpheria:rpc-websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elpheria:rpc_websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpc:rpc-websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpc:rpc_websockets:9.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rpc-websockets@9.3.9/node_modules/rpc-websockets/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/ruby2atom_3@2.5.24?package-id=2122092262c3b497",
      "type": "library",
      "name": "ruby2atom_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:ruby2atom-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/ruby2atom_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "28aa569e952e18247aa2c4187215e97637d1f36a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:ruby2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom-3:ruby2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom-3:ruby2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom_3:ruby2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom_3:ruby2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:ruby2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:ruby2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom:ruby2atom-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ruby2atom:ruby2atom_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.ruby2atom_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.ruby2atom_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/rw@1.3.3?package-id=882baa3b23452cdc",
      "type": "library",
      "author": "Mike Bostock (http://bost.ocks.org/mike)",
      "name": "rw",
      "version": "1.3.3",
      "description": "Now stdin and stdout are files.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mbostock:rw:1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/rw@1.3.3",
      "externalReferences": [
        {
          "url": "http://github.com/mbostock/rw.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mbostock/rw",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rw:rw:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/rw@1.3.3/node_modules/rw/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=e4ef203cded5900d",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)",
      "name": "safe-buffer",
      "version": "5.1.2",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/safe-buffer@5.1.2/node_modules/safe-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=76c88fd2cfea2252",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=ad283440c98ada89",
      "type": "library",
      "author": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/safer-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=c30956c55d74160f",
      "type": "library",
      "author": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/safer-buffer@2.1.2/node_modules/safer-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=8cc44e9b47df8656",
      "type": "library",
      "author": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/sax@1.6.1?package-id=a0ccf962944aed26",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "sax",
      "version": "1.6.1",
      "description": "An evented streaming XML parser in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sax:sax:1.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/sax@1.6.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/isaacs/sax-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/sax@1.6.1/node_modules/sax/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/saxes@5.0.1?package-id=985d96c5658fee1c",
      "type": "library",
      "author": "Louis-Dominique Dubeau <ldd@lddubeau.com>",
      "name": "saxes",
      "version": "5.0.1",
      "description": "An evented streaming XML parser in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lddubeau:saxes:5.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/saxes@5.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/lddubeau/saxes.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:saxes:saxes:5.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/saxes@5.0.1/node_modules/saxes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.modules/scala-asm@9.9.0-scala-1?package-id=21eb612a2772644e",
      "type": "library",
      "name": "scala-asm",
      "version": "9.9.0-scala-1",
      "cpe": "cpe:2.3:a:org.scala-lang.modules:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang.modules/scala-asm@9.9.0-scala-1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9de6fe27c09c69521a2603b34c8dcc39c9f3b736"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-asm:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-asm:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_asm:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_asm:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-asm:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_asm:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_asm:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:modules:9.9.0-scala-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-asm-9.9.0-scala-1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-asm-9.9.0-scala-1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.modules/scala-collection-compat_3@2.8.1?package-id=ccedc45316da0d76",
      "type": "library",
      "name": "scala-collection-compat_3",
      "version": "2.8.1",
      "cpe": "cpe:2.3:a:scala-collection-compat-3:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang.modules/scala-collection-compat_3@2.8.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "79d261994f2f166b9f5ab2bbd089c4731a83043d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat-3:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat-3:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat_3:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat_3:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat_3:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat_3:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat_3:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat_3:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat-3:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat_3:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat_3:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection-compat:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-collection-compat-3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-collection-compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_collection_compat_3:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection_compat:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-collection:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_collection:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:modules:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-collection-compat_3-2.8.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-collection-compat_3-2.8.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang/scala-library@3.8.4?package-id=baec8cbde3beb679",
      "type": "library",
      "name": "scala-library",
      "version": "3.8.4",
      "cpe": "cpe:2.3:a:org.scala-lang:scala-library:3.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang/scala-library@3.8.4",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e44f14c38dba7da4d7050cbf72fbf9dcbb6f9e7d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-library:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-library:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_library:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_library:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_library:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala-library-3.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala-library-3.8.4.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.modules/scala-parallel-collections_3@1.2.0?package-id=567c911f73355345",
      "type": "library",
      "name": "scala-parallel-collections_3",
      "version": "1.2.0",
      "cpe": "cpe:2.3:a:scala-parallel-collections-3:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang.modules/scala-parallel-collections_3@1.2.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f95d62c4d0b7f3b734bf7adb9f68e416af2de4dc"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections-3:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections-3:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections_3:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections_3:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections_3:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections_3:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections_3:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections_3:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections-3:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections_3:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections_3:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel-collections:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-parallel-collections-3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-parallel-collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_parallel_collections_3:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel_collections:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parallel:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parallel:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:modules:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-parallel-collections_3-1.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-parallel-collections_3-1.2.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.modules/scala-parser-combinators_3@2.4.0?package-id=06fb283a6c73beea",
      "type": "library",
      "name": "scala-parser-combinators_3",
      "version": "2.4.0",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0;description=Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang.modules/scala-parser-combinators_3@2.4.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "991a2c0a92ee6ad62692f71cc2e19e3f07591567"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules.scala-parser-combinators:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators-3:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators_3:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators_3:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser-combinators:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-parser-combinators-3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-parser-combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_parser_combinators_3:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser_combinators:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang.modules:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-parser-combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_parser_combinators:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-parser:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_parser:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modules:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:modules:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-parser-combinators_3-2.4.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.modules.scala-parser-combinators_3-2.4.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang/scala3-interfaces@3.4.1?package-id=ce81cf94992ec60c",
      "type": "library",
      "name": "scala3-interfaces",
      "version": "3.4.1",
      "cpe": "cpe:2.3:a:scala3-interfaces:scala3-interfaces:3.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang/scala3-interfaces@3.4.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f6667ac2d2148b75faddf8accd33ad4ba71201a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-interfaces:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_interfaces:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_interfaces:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala3-interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala3_interfaces:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala3-interfaces-3.4.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala3-interfaces-3.4.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang/scala3-library_3@3.8.4?package-id=79fe09b8cf70c53d",
      "type": "library",
      "name": "scala3-library_3",
      "version": "3.8.4",
      "cpe": "cpe:2.3:a:scala3-library-3:scala3-library-3:3.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang/scala3-library_3@3.8.4",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ada8b099f5425afff3e9164afd6601bed4ef2e21"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library-3:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library-3:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library_3:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library_3:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library_3:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library_3:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library_3:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library_3:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3-library:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3_library:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala3:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala3-library-3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala3-library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala3_library_3:3.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala3-library_3-3.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.scala3-library_3-3.8.4.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/scheduler@0.27.0?package-id=35db232e474982ef",
      "type": "library",
      "name": "scheduler",
      "version": "0.27.0",
      "description": "Cooperative scheduler for the browser environment.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:scheduler:scheduler:0.27.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/scheduler@0.27.0",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        },
        {
          "url": "https://react.dev/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:scheduler:0.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/scheduler@0.27.0/node_modules/scheduler/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/schemes@1.4.0?package-id=c4b6ce2e0bf9c7c5",
      "type": "library",
      "author": "Peter Müller <munter@fumle.dk>",
      "name": "schemes",
      "version": "1.4.0",
      "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:schemes:schemes:1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/schemes@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/Munter/schemes.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Munter/schemes",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Munter:schemes:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/schemes@1.4.0/node_modules/schemes/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.scopt/scopt_3@4.1.0?package-id=a4a538eacaca754d",
      "type": "library",
      "name": "scopt_3",
      "version": "4.1.0",
      "cpe": "cpe:2.3:a:com.github.scopt:scopt-3:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.github.scopt/scopt_3@4.1.0",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6e296ff09a2407bc3f74d3e62e76a384c07dbc8d"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.scopt:scopt_3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.scopt:scopt:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt-3:scopt-3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt-3:scopt_3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt_3:scopt-3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt_3:scopt_3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:scopt-3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:scopt_3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt-3:scopt:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt:scopt-3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt:scopt_3:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt_3:scopt:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:scopt:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scopt:scopt:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.scopt.scopt_3-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.github.scopt.scopt_3-4.1.0.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/sed@4.9-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=25af63bae673e973",
      "type": "library",
      "publisher": "Clint Adams <clint@debian.org>",
      "name": "sed",
      "version": "4.9-1+deb12u1",
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause-UC"
          }
        },
        {
          "license": {
            "id": "BSL-1.0"
          }
        },
        {
          "license": {
            "id": "GFDL-1.3-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "ISC"
          }
        },
        {
          "license": {
            "id": "X11"
          }
        },
        {
          "license": {
            "name": "GFDL-NIV-1.3+"
          }
        },
        {
          "license": {
            "name": "pcre"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sed:sed:4.9-1\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/sed@4.9-1%2Bdeb12u1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/sed/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/sed.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/sed.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "987"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/semanticcpg_3@2.5.24?package-id=fe4adb38058aef8d",
      "type": "library",
      "name": "semanticcpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:semanticcpg-3:semanticcpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/semanticcpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "721e29b59c8faf1eb02d325629fd6e78249ba90f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:semanticcpg-3:semanticcpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:semanticcpg_3:semanticcpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:semanticcpg_3:semanticcpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:semanticcpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:semanticcpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:semanticcpg:semanticcpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:semanticcpg:semanticcpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:semanticcpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:semanticcpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.semanticcpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.semanticcpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/semver@6.3.1?package-id=80f108db60798c06",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "semver",
      "version": "6.3.1",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:semver:6.3.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/semver@6.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/npm/node-semver.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/semver@6.3.1/node_modules/semver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/semver@7.7.2?package-id=4329df5f0ba6e093",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "semver",
      "version": "7.7.2",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:semver:7.7.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/semver@7.7.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/semver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/semver@7.7.4?package-id=f7c50ed26cc73982",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "semver",
      "version": "7.7.4",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:semver:7.7.4:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/semver@7.7.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/semver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/semver@7.8.5?package-id=d658e61e4dfdf593",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "semver",
      "version": "7.8.5",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:npmjs:semver:7.8.5:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/semver@7.8.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/semver@7.8.5/node_modules/semver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/send@0.19.0?package-id=38443e0755ae3dd5",
      "type": "library",
      "author": "TJ Holowaychuk <tj@vision-media.ca>, Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <jcready@gmail.com>, Jesús Leganés Combarro <piranna@gmail.com>",
      "name": "send",
      "version": "0.19.0",
      "description": "Better streaming static file server with Range and conditional-GET support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:send_project:send:0.19.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/send@0.19.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/send@0.19.0/node_modules/send/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/serve-static@1.16.2?package-id=dc0776a1eedde89d",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "serve-static",
      "version": "1.16.2",
      "description": "Serve static files",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:serve-static:serve-static:1.16.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/serve-static@1.16.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:serve-static:serve_static:1.16.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:serve_static:serve-static:1.16.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:serve_static:serve_static:1.16.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:serve:serve-static:1.16.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:serve:serve_static:1.16.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/serve-static@1.16.2/node_modules/serve-static/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/setimmediate@1.0.5?package-id=5304171e8b25169e",
      "type": "library",
      "author": "YuzuJS, Domenic Denicola <d@domenic.me> (https://domenic.me), Donavon West <github@donavon.com> (http://donavon.com), Yaffle",
      "name": "setimmediate",
      "version": "1.0.5",
      "description": "A shim for the setImmediate efficient script yielding API",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/setimmediate@1.0.5/node_modules/setimmediate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/setprototypeof@1.2.0?package-id=33f3c14bb6f0f631",
      "type": "library",
      "author": "Wes Todd",
      "name": "setprototypeof",
      "version": "1.2.0",
      "description": "A small polyfill for Object.setprototypeof",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/wesleytodd/setprototypeof.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/wesleytodd/setprototypeof",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wesleytodd:setprototypeof:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/setprototypeof@1.2.0/node_modules/setprototypeof/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=3b603d91351811a1",
      "type": "library",
      "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/shebang-command/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=4ce0912d0b1c6490",
      "type": "library",
      "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/shebang-command@2.0.0/node_modules/shebang-command/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=db16b7c77751c2ef",
      "type": "library",
      "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/shebang-command/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=57dbec3774784941",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/shebang-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=489a4e0f95160919",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/shebang-regex@3.0.0/node_modules/shebang-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=8bad1e135301bc45",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/shebang-regex/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/shiki@3.14.0?package-id=adb6b722d376182a",
      "type": "library",
      "author": "Pine Wu <octref@gmail.com>; Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "shiki",
      "version": "3.14.0",
      "description": "A beautiful Syntax Highlighter.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:shikijs:shiki:3.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/shiki@3.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shikijs/shiki.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/shikijs/shiki#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shiki:shiki:3.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/shiki@3.14.0/node_modules/shiki/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel@1.1.0?package-id=1efe8c37d19a43f7",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel",
      "version": "1.1.0",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel@1.1.0/node_modules/side-channel/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel@1.1.1?package-id=cec0b6573d60f170",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel",
      "version": "1.1.1",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel:side-channel:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel@1.1.1/node_modules/side-channel/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel-list@1.0.0?package-id=263167794665d544",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel-list",
      "version": "1.0.0",
      "description": "Store information about any JS value in a side channel, using a linked list",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel-list@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-list.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel-list#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel-list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel-list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel_list:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel-list@1.0.0/node_modules/side-channel-list/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel-list@1.0.1?package-id=5c513bc469ad3ec4",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel-list",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a linked list",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel-list@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-list.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel-list#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel-list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel-list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel_list:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel-list@1.0.1/node_modules/side-channel-list/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel-map@1.0.1?package-id=4309828d513ed9ff",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel-map",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a Map",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-map.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel-map#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel-map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel-map@1.0.1/node_modules/side-channel-map/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2?package-id=66e918845949169d",
      "type": "library",
      "author": "Jordan Harband <ljharb@gmail.com>",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-weakmap.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ljharb/side-channel-weakmap#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ljharb:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/side-channel-weakmap@1.0.2/node_modules/side-channel-weakmap/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/siginfo@2.0.0?package-id=920fd4bc2a1996e9",
      "type": "library",
      "author": "Emil Bay <github@tixz.dk>",
      "name": "siginfo",
      "version": "2.0.0",
      "description": "Utility module to print pretty messages on SIGINFO/SIGUSR1",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:emilbayes:siginfo:2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/siginfo@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/emilbayes/siginfo.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/emilbayes/siginfo#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:siginfo:siginfo:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/siginfo@2.0.0/node_modules/siginfo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=077afd7f632b927f",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/tapjs/signal-exit.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/signal-exit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=e1972e3207053894",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/tapjs/signal-exit.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/signal-exit@4.1.0/node_modules/signal-exit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=a6026ad1b170946b",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/tapjs/signal-exit.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8?package-id=73e521acc41b5f4e",
      "type": "library",
      "name": "sigs.k8s.io/json",
      "version": "v0.0.0-20241014173422-cfa47c3a1cc8",
      "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8?package-id=31b1e232d5e2bfba",
      "type": "library",
      "name": "sigs.k8s.io/json",
      "version": "v0.0.0-20241014173422-cfa47c3a1cc8",
      "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1?package-id=1cdb064f5800e2cd",
      "type": "library",
      "name": "sigs.k8s.io/kustomize/api",
      "version": "v0.20.1",
      "cpe": "cpe:2.3:a:kustomize:api:v0.20.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iWP1Ydh3/lmldBnH/S5RXgT98vWYMaTUL1ADcr+Sv7I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1?package-id=1c42d72a502d72ac",
      "type": "library",
      "name": "sigs.k8s.io/kustomize/api",
      "version": "v0.20.1",
      "cpe": "cpe:2.3:a:kustomize:api:v0.20.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iWP1Ydh3/lmldBnH/S5RXgT98vWYMaTUL1ADcr+Sv7I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1?package-id=f40ebe64ce1797f2",
      "type": "library",
      "name": "sigs.k8s.io/kustomize/kyaml",
      "version": "v0.20.1",
      "cpe": "cpe:2.3:a:kustomize:kyaml:v0.20.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PCMnA2mrVbRP3NIB6v9kYCAc38uvFLVs8j/CD567A78="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1?package-id=e7cb995f097cb060",
      "type": "library",
      "name": "sigs.k8s.io/kustomize/kyaml",
      "version": "v0.20.1",
      "cpe": "cpe:2.3:a:kustomize:kyaml:v0.20.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PCMnA2mrVbRP3NIB6v9kYCAc38uvFLVs8j/CD567A78="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=a3e5f4d4bda8a89e",
      "type": "library",
      "name": "sigs.k8s.io/randfill",
      "version": "v1.0.0",
      "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=266d60dd4456b9d9",
      "type": "library",
      "name": "sigs.k8s.io/randfill",
      "version": "v1.0.0",
      "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0?package-id=546997b9494e7b22",
      "type": "library",
      "name": "sigs.k8s.io/structured-merge-diff/v6",
      "version": "v6.3.0",
      "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured-merge:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0?package-id=9434efc8fda2f5c0",
      "type": "library",
      "name": "sigs.k8s.io/structured-merge-diff/v6",
      "version": "v6.3.0",
      "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured-merge:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured:v6:v6.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=65a6efab0828885a",
      "type": "library",
      "name": "sigs.k8s.io/yaml",
      "version": "v1.6.0",
      "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=efaa08ca19821443",
      "type": "library",
      "name": "sigs.k8s.io/yaml",
      "version": "v1.6.0",
      "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/sigstore@3.1.0?package-id=83afb4c89ea40b7b",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "sigstore",
      "version": "3.1.0",
      "description": "code-signing for npm packages",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sigstore:sigstore:3.1.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/sigstore@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sigstore/sigstore-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/sigstore/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/simple-concat@1.0.1?package-id=48e69ec3dd2bc3b8",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
      "name": "simple-concat",
      "version": "1.0.1",
      "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/simple-concat@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/simple-concat.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/simple-concat",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:simple-concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:feross:simple_concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/simple-concat@1.0.1/node_modules/simple-concat/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=5e4f2fd39b9fb81e",
      "type": "library",
      "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
      "name": "simple-get",
      "version": "4.0.1",
      "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/simple-get@4.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/simple-get.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/feross/simple-get",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/simple-get@4.0.1/node_modules/simple-get/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?package-id=d03ab7a82ae4dd2b",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.18",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/license/mit"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.slf4j:slf4j-api:2.0.18:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78a9e7a37cd6360e0b818e86341b24123d28d4df"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.slf4j:slf4j_api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j-api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.slf4j.slf4j-api-2.0.18.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.slf4j.slf4j-api-2.0.18.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-nop@2.0.18?package-id=de90cc52bbd49c34",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-nop",
      "version": "2.0.18",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/license/mit"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.slf4j:slf4j-nop:2.0.18:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.slf4j/slf4j-nop@2.0.18",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "52e3ac646a4ebaa457bdf0c1180a6ed625bd1b02"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.slf4j:slf4j_nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-nop:slf4j-nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-nop:slf4j_nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_nop:slf4j-nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_nop:slf4j_nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_nop:2.0.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.slf4j.slf4j-nop-2.0.18.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-nop"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.slf4j.slf4j-nop-2.0.18.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/smali-dexlib2/smali-dexlib2@3.0.9?package-id=edbb78193f3b9962",
      "type": "library",
      "name": "smali-dexlib2",
      "version": "3.0.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:smali-dexlib2:smali-dexlib2:3.0.9:*:*:*:*:*:*:*",
      "purl": "pkg:maven/smali-dexlib2/smali-dexlib2@3.0.9",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce8ab6d577bf076a67614c92157e92122b539dc3"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smali-dexlib2:smali_dexlib2:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smali_dexlib2:smali-dexlib2:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smali_dexlib2:smali_dexlib2:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smali:smali-dexlib2:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smali:smali_dexlib2:3.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.android.tools.smali.smali-dexlib2-3.0.9.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.android.tools.smali.smali-dexlib2-3.0.9.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=f7cf2b644c651518",
      "type": "library",
      "author": "Josh Glazebrook, syvita",
      "name": "smart-buffer",
      "version": "4.2.0",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/smart-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=babdada16b17263a",
      "type": "library",
      "author": "Josh Glazebrook, syvita",
      "name": "smart-buffer",
      "version": "4.2.0",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/smart-buffer@4.2.0/node_modules/smart-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=b9cef0d0a41a6c67",
      "type": "library",
      "author": "Josh Glazebrook, syvita",
      "name": "smart-buffer",
      "version": "4.2.0",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/smtp-address-parser@1.1.0?package-id=43e7198e7505d194",
      "type": "library",
      "author": "Gene Hightower <gene@digilicious.com> (https://digilicious.com/)",
      "name": "smtp-address-parser",
      "version": "1.1.0",
      "description": "Parse an SMTP (RFC-5321) address",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:smtp-address-parser:smtp-address-parser:1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/smtp-address-parser@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/gene-hightower/smtp-address-parser.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/gene-hightower/smtp-address-parser#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp-address-parser:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp_address_parser:smtp-address-parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp_address_parser:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gene-hightower:smtp-address-parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gene-hightower:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp-address:smtp-address-parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp-address:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp_address:smtp-address-parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp_address:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp:smtp-address-parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:smtp:smtp_address_parser:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/smtp-address-parser@1.1.0/node_modules/smtp-address-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks@2.8.7?package-id=5ac5064ec194d890",
      "type": "library",
      "author": "Josh Glazebrook, castorw",
      "name": "socks",
      "version": "2.8.7",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks@2.8.7",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/socks.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks:2.8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/socks/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks@2.8.7?package-id=6c8a236495c5346f",
      "type": "library",
      "author": "Josh Glazebrook, castorw",
      "name": "socks",
      "version": "2.8.7",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks@2.8.7",
      "externalReferences": [
        {
          "url": "https://github.com/JoshGlazebrook/socks.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks:2.8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/socks/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks@2.8.9?package-id=9353a36a338d0719",
      "type": "library",
      "author": "Josh Glazebrook, castorw",
      "name": "socks",
      "version": "2.8.9",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks@2.8.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/JoshGlazebrook/socks.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks:2.8.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/socks@2.8.9/node_modules/socks/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=768f3f1386176d67",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
      "name": "socks-proxy-agent",
      "version": "8.0.5",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks-proxy-agent@8.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/socks-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=c9a7afda6d19ae4e",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
      "name": "socks-proxy-agent",
      "version": "8.0.5",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks-proxy-agent@8.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/socks-proxy-agent@8.0.5/node_modules/socks-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=70d90db663b64594",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
      "name": "socks-proxy-agent",
      "version": "8.0.5",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/socks-proxy-agent@8.0.5",
      "externalReferences": [
        {
          "url": "https://github.com/TooTallNate/proxy-agents.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/sonner@2.0.7?package-id=a81a63ba8cca994c",
      "type": "library",
      "author": "Emil Kowalski <e@emilkowal.ski>",
      "name": "sonner",
      "version": "2.0.7",
      "description": "An opinionated toast component for React.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sonner:sonner:2.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/sonner@2.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/emilkowalski/sonner.git",
          "type": "distribution"
        },
        {
          "url": "https://sonner.emilkowal.ski/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/sonner@2.0.7_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/sonner/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.soot-oss/soot@4.7.1?package-id=fd66d86555cb56cd",
      "type": "library",
      "group": "org.soot-oss",
      "name": "soot",
      "version": "4.7.1",
      "licenses": [
        {
          "license": {
            "name": "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url": "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "cpe": "cpe:2.3:a:org.soot-oss:soot:4.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.soot-oss/soot@4.7.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f08b1d77e35a76f98323ddbc3aaf14cb4713e381"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot-oss:soot:4.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot_oss:soot:4.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:soot:soot:4.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.soot-4.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "soot"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.soot-oss"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.soot-oss.soot-4.7.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/source-map-js@1.2.1?package-id=d878aa7fb8cd68ae",
      "type": "library",
      "author": "Valentin 7rulnik Semirulnik <v7rulnik@gmail.com>, Nick Fitzgerald <nfitzgerald@mozilla.com>, Tobias Koppers <tobias.koppers@googlemail.com>, Duncan Beevers <duncan@dweebd.com>, Stephen Crane <scrane@mozilla.com>, Ryan Seddon <seddon.ryan@gmail.com>, Miles Elam <miles.elam@deem.com>, Mihai Bazon <mihai.bazon@gmail.com>, Michael Ficarra <github.public.email@michael.ficarra.me>, Todd Wolfson <todd@twolfson.com>, Alexander Solovyov <alexander@solovyov.net>, Felix Gnass <fgnass@gmail.com>, Conrad Irwin <conrad.irwin@gmail.com>, usrbincc <usrbincc@yahoo.com>, David Glasser <glasser@davidglasser.net>, Chase Douglas <chase@newrelic.com>, Evan Wallace <evan.exe@gmail.com>, Heather Arthur <fayearthur@gmail.com>, Hugh Kennedy <hughskennedy@gmail.com>, David Glasser <glasser@davidglasser.net>, Simon Lydell <simon.lydell@gmail.com>, Jmeas Smith <jellyes2@gmail.com>, Michael Z Goddard <mzgoddard@gmail.com>, azu <azu@users.noreply.github.com>, John Gozde <john@gozde.ca>, Adam Kirkton <akirkton@truefitinnovation.com>, Chris Montgomery <christopher.montgomery@dowjones.com>, J. Ryan Stinnett <jryans@gmail.com>, Jack Herrington <jherrington@walmartlabs.com>, Chris Truter <jeffpalentine@gmail.com>, Daniel Espeset <daniel@danielespeset.com>, Jamie Wong <jamie.lf.wong@gmail.com>, Eddy Bruël <ejpbruel@mozilla.com>, Hawken Rives <hawkrives@gmail.com>, Gilad Peleg <giladp007@gmail.com>, djchie <djchie.dev@gmail.com>, Gary Ye <garysye@gmail.com>, Nicolas Lalevée <nicolas.lalevee@hibnet.org>",
      "name": "source-map-js",
      "version": "1.2.1",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:source-map-js:source-map-js:1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/source-map-js@1.2.1",
      "externalReferences": [
        {
          "url": "https://github.com/7rulnik/source-map-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source-map-js:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source_map_js:source-map-js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source_map_js:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source-map:source-map-js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source-map:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source_map:source-map-js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source_map:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:7rulnik:source-map-js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:7rulnik:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source:source-map-js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:source:source_map_js:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/space-separated-tokens@2.0.2?package-id=ed2f269d6320df21",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "space-separated-tokens",
      "version": "2.0.2",
      "description": "Parse and stringify space separated tokens",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:space-separated-tokens:space-separated-tokens:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/space-separated-tokens@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space-separated-tokens:space_separated_tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space_separated_tokens:space-separated-tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space_separated_tokens:space_separated_tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space-separated:space-separated-tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space-separated:space_separated_tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space_separated:space-separated-tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space_separated:space_separated_tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space:space-separated-tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:space:space_separated_tokens:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/space-separated-tokens@2.0.2/node_modules/space-separated-tokens/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-correct@3.2.0?package-id=51f79cc3a2741851",
      "type": "library",
      "name": "spdx-correct",
      "version": "3.2.0",
      "description": "correct invalid SPDX expressions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-correct@3.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_correct:spdx-correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/spdx-correct@3.2.0/node_modules/spdx-correct/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-correct@3.2.0?package-id=7ef2df5b28cabb73",
      "type": "library",
      "name": "spdx-correct",
      "version": "3.2.0",
      "description": "correct invalid SPDX expressions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-correct@3.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_correct:spdx-correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_correct:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-correct/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0?package-id=d1c73232c04dd7f8",
      "type": "library",
      "author": "The Linux Foundation, Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "description": "list of SPDX standard license exceptions",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/spdx-exceptions@2.5.0/node_modules/spdx-exceptions/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0?package-id=14080b01d7b4803f",
      "type": "library",
      "author": "The Linux Foundation, Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "description": "list of SPDX standard license exceptions",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=864d820ea5530ab0",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/spdx-expression-parse@3.0.1/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=3f6ed6a4b5905073",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-correct/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=79497656967c0e92",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0?package-id=f54dd29b019d0d3e",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "4.0.0",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/spdx-expression-parse@4.0.0/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0?package-id=9a0a9649306418ed",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)",
      "name": "spdx-expression-parse",
      "version": "4.0.0",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-expression-parse@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-expression-parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_expression_parse:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.23?package-id=b96ba367276f7076",
      "type": "library",
      "author": "Shinnosuke Watanabe (https://github.com/shinnn)",
      "name": "spdx-license-ids",
      "version": "3.0.23",
      "description": "A list of SPDX license identifiers",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-license-ids@3.0.23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license-ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/spdx-license-ids@3.0.23/node_modules/spdx-license-ids/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.23?package-id=486a300524a3a8e0",
      "type": "library",
      "author": "Shinnosuke Watanabe (https://github.com/shinnn)",
      "name": "spdx-license-ids",
      "version": "3.0.23",
      "description": "A list of SPDX license identifiers",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*",
      "purl": "pkg:npm/spdx-license-ids@3.0.23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license-ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license_ids:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx-license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx_license:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx-license-ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spdx:spdx_license_ids:3.0.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ssri@12.0.0?package-id=ccc47444c3ff035f",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ssri",
      "version": "12.0.0",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ssri@12.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ssri.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/ssri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ssri@12.0.0?package-id=066273021eddb992",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ssri",
      "version": "12.0.0",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ssri@12.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ssri.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ssri@12.0.0/node_modules/ssri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ssri@12.0.0?package-id=b324534cbb5b10cf",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ssri",
      "version": "12.0.0",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ssri@12.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ssri.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/ssri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ssri@13.0.1?package-id=d75906ec75cc53df",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "ssri",
      "version": "13.0.1",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ssri_project:ssri:13.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ssri@13.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/ssri.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ssri@13.0.1/node_modules/ssri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stackback@0.0.2?package-id=b1c45eaafa697bec",
      "type": "library",
      "author": "Roman Shtylman <shtylman@gmail.com>",
      "name": "stackback",
      "version": "0.0.2",
      "description": "return list of CallSite objects from a captured stacktrace",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stackback:stackback:0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stackback@0.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/shtylman/node-stackback.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shtylman:stackback:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stackback@0.0.2/node_modules/stackback/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stackblur-canvas@2.7.0?package-id=4884e429fec7148c",
      "type": "library",
      "author": "Mario Klingemann, Brett Zamir",
      "name": "stackblur-canvas",
      "version": "2.7.0",
      "description": "Fast and almost Gaussian blur by Mario Klingemann",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stackblur-canvas:stackblur-canvas:2.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stackblur-canvas@2.7.0",
      "externalReferences": [
        {
          "url": "https://github.com/flozz/StackBlur.git",
          "type": "distribution"
        },
        {
          "url": "http://www.quasimondo.com/StackBlurForCanvas/StackBlurDemo.html",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stackblur-canvas:stackblur_canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stackblur_canvas:stackblur-canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stackblur_canvas:stackblur_canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stackblur:stackblur-canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stackblur:stackblur_canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:flozz:stackblur-canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:flozz:stackblur_canvas:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stackblur-canvas@2.7.0/node_modules/stackblur-canvas/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/statuses@1.5.0?package-id=159bda8d8c0f9064",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "statuses",
      "version": "1.5.0",
      "description": "HTTP status utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/statuses@1.5.0/node_modules/statuses/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/statuses@2.0.1?package-id=709223ac28d9df76",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "statuses",
      "version": "2.0.1",
      "description": "HTTP status utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:statuses:statuses:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/statuses@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/statuses@2.0.1/node_modules/statuses/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/statuses@2.0.2?package-id=7863f5f34c90c34a",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "statuses",
      "version": "2.0.2",
      "description": "HTTP status utility",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:statuses:statuses:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/statuses@2.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/statuses@2.0.2/node_modules/statuses/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/std-env@3.9.0?package-id=90ebce006af29323",
      "type": "library",
      "name": "std-env",
      "version": "3.9.0",
      "description": "Runtime agnostic JS utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:std-env:std-env:3.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/std-env@3.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:std-env:std_env:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:std_env:std-env:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:std_env:std_env:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:std:std-env:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:std:std_env:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/std-env@3.9.0/node_modules/std-env/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.20.12?package-id=50d23620c5b78793",
      "type": "library",
      "name": "stdlib",
      "version": "go1.20.12",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.20.12:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.20.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.21.5/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.20.12"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.23.12?package-id=1dde85ab4c0389f7",
      "type": "library",
      "name": "stdlib",
      "version": "go1.23.12",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.23.12:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.23.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@esbuild+linux-x64@0.25.10/node_modules/@esbuild/linux-x64/bin/esbuild"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.23.12"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=b976663607ee2058",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/golem/golem-linux-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=e5c332129980fb97",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=4d1e98ab5722d05e",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trustinspector/trustinspector-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=b39e270fe418e9b7",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/golem/golem-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=e188ee91c393a7d2",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.25.11?package-id=f298c90698d4e843",
      "type": "library",
      "name": "stdlib",
      "version": "go1.25.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.25.11:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.25.11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trustinspector/trustinspector-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.26.4?package-id=c6f02a59a7891473",
      "type": "library",
      "name": "stdlib",
      "version": "go1.26.4",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.26.4:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.26.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+safer-exec-linux-amd64@0.15.0/node_modules/@cdxgen/safer-exec-linux-amd64/bin/safer-exec-rt"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.26.4"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stream-chain@2.2.5?package-id=d5660f30859e6de7",
      "type": "library",
      "author": "Eugene Lazutkin <eugene.lazutkin@gmail.com> (http://lazutkin.com/)",
      "name": "stream-chain",
      "version": "2.2.5",
      "description": "Chain functions as transform streams.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stream-chain:stream-chain:2.2.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stream-chain@2.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/uhop/stream-chain.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/uhop/stream-chain#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream-chain:stream_chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream_chain:stream-chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream_chain:stream_chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream:stream-chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream:stream_chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:uhop:stream-chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:uhop:stream_chain:2.2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stream-chain@2.2.5/node_modules/stream-chain/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stream-json@1.9.1?package-id=a4d889e0cc01b65a",
      "type": "library",
      "author": "Eugene Lazutkin <eugene.lazutkin@gmail.com> (http://lazutkin.com/)",
      "name": "stream-json",
      "version": "1.9.1",
      "description": "stream-json is the micro-library of Node.js stream components for creating custom JSON processing pipelines with a minimal memory footprint. It can parse JSON files far exceeding available memory streaming individual primitives using a SAX-inspired API. Includes utilities to stream JSON database dumps.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stream-json:stream-json:1.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stream-json@1.9.1",
      "externalReferences": [
        {
          "url": "git://github.com/uhop/stream-json.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/uhop/stream-json",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream-json:stream_json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream_json:stream-json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream_json:stream_json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream:stream-json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stream:stream_json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:uhop:stream-json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:uhop:stream_json:1.9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stream-json@1.9.1/node_modules/stream-json/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/streamdown@1.4.0?package-id=5db8903a37d55022",
      "type": "library",
      "author": "Hayden Bleasel <hayden.bleasel@vercel.com>",
      "name": "streamdown",
      "version": "1.4.0",
      "description": "A drop-in replacement for react-markdown, designed for AI-powered streaming.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:streamdown:streamdown:1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/streamdown@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/vercel/streamdown.git",
          "type": "distribution"
        },
        {
          "url": "https://streamdown.ai",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/streamdown@1.4.0_@types+react@19.2.1_react@19.2.1/node_modules/streamdown/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@4.2.3?package-id=6a99e6e4d2fd8eac",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/string-width-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@4.2.3?package-id=3310042a86818e8d",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@4.2.3?package-id=b209fd0965f9fac0",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string-width@4.2.3/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@4.2.3?package-id=e2099290a066d99d",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/string-width-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@4.2.3?package-id=38a30aaeaeb0b909",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@5.1.2?package-id=54094bc91bdaeba7",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@5.1.2?package-id=44164e7a559edf40",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string-width@5.1.2/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@5.1.2?package-id=9291e3d2f2f4d976",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@5.1.2?package-id=650efec40c60e144",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@7.2.0?package-id=a3a51c08b13b1baf",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "7.2.0",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:7.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@7.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string-width@7.2.0/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string-width@8.2.2?package-id=5fac5a9f1f08ff56",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "string-width",
      "version": "8.2.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-width:string-width:8.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string-width@8.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-width:string_width:8.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string-width:8.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_width:string_width:8.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-width:8.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_width:8.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string-width@8.2.2/node_modules/string-width/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=f0a458872045481a",
      "type": "library",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/string_decoder.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/nodejs/string_decoder",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:string-decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:string_decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string_decoder@1.1.1/node_modules/string_decoder/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=c8dd60b6a5e35420",
      "type": "library",
      "name": "string_decoder",
      "version": "1.3.0",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/string_decoder.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/nodejs/string_decoder",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/string_decoder@1.3.0/node_modules/string_decoder/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stringify-entities@4.0.4?package-id=d07ea410de27a3cd",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "stringify-entities",
      "version": "4.0.4",
      "description": "Serialize (encode) HTML character references",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:stringify-entities:stringify-entities:4.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stringify-entities@4.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stringify-entities:stringify_entities:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stringify_entities:stringify-entities:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stringify_entities:stringify_entities:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stringify:stringify-entities:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stringify:stringify_entities:4.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stringify-entities@4.0.4/node_modules/stringify-entities/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=f3df6bb69d0b8015",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/string-width-cjs/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=8882aa6b2265d101",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/strip-ansi-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=2ee8a76eede0d449",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=0e96ea2cc98a74b5",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/strip-ansi@6.0.1/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=7716c2197b9069ed",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/strip-ansi-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=69c28715aba5a85c",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@7.1.2?package-id=463f3ceb9346392b",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "strip-ansi",
      "version": "7.1.2",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@7.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:7.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=753a97f8f0d9ca75",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/strip-ansi@7.2.0/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=0ee6e12368f50261",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=bf91dc490bec376d",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=e57ce242e4d54649",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/strip-json-comments@2.0.1/node_modules/strip-json-comments/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/style-to-js@1.1.18?package-id=6465cd83e8b79cf6",
      "type": "library",
      "author": "Mark <mark@remarkablemark.org>",
      "name": "style-to-js",
      "version": "1.1.18",
      "description": "Parses CSS inline style to JavaScript object (camelCased).",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:style-to-js:style-to-js:1.1.18:*:*:*:*:*:*:*",
      "purl": "pkg:npm/style-to-js@1.1.18",
      "externalReferences": [
        {
          "url": "git+https://github.com/remarkablemark/style-to-js.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to-js:style_to_js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to_js:style-to-js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to_js:style_to_js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to:style-to-js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to:style_to_js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to:style-to-js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to:style_to_js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style:style-to-js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style:style_to_js:1.1.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/style-to-js@1.1.18/node_modules/style-to-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/style-to-object@1.0.11?package-id=09ff47e3320188f0",
      "type": "library",
      "author": "Mark <mark@remarkablemark.org>",
      "name": "style-to-object",
      "version": "1.0.11",
      "description": "Parse CSS inline style to JavaScript object.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:style-to-object:style-to-object:1.0.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/style-to-object@1.0.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/remarkablemark/style-to-object.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to-object:style_to_object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to_object:style-to-object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to_object:style_to_object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to:style-to-object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style-to:style_to_object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to:style-to-object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style_to:style_to_object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style:style-to-object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:style:style_to_object:1.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/style-to-object@1.0.11/node_modules/style-to-object/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/stylis@4.3.6?package-id=aed3a62e54b5f851",
      "type": "library",
      "author": "Sultan Tarimo <sultantarimo@me.com>",
      "name": "stylis",
      "version": "4.3.6",
      "description": "A Light–weight CSS Preprocessor",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:thysultan:stylis:4.3.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/stylis@4.3.6",
      "externalReferences": [
        {
          "url": "https://github.com/thysultan/stylis.js",
          "type": "distribution"
        },
        {
          "url": "https://github.com/thysultan/stylis.js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stylis:stylis:4.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/stylis@4.3.6/node_modules/stylis/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/superstruct@2.0.2?package-id=dbfc03303432c326",
      "type": "library",
      "name": "superstruct",
      "version": "2.0.2",
      "description": "A simple and composable way to validate data in JavaScript (and TypeScript).",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ianstormtaylor:superstruct:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/superstruct@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/ianstormtaylor/superstruct.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:superstruct:superstruct:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/superstruct@2.0.2/node_modules/superstruct/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/supports-color@9.4.0?package-id=54a7a19a496b2875",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "supports-color",
      "version": "9.4.0",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:supports-color:supports-color:9.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/supports-color@9.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports-color:supports_color:9.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports_color:supports-color:9.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports_color:supports_color:9.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports:supports-color:9.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:supports:supports_color:9.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/supports-color/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/svg-pathdata@6.0.3?package-id=82a72ad39aeadf3b",
      "type": "library",
      "author": "Nicolas Froidure, Anders Kaseorg <andersk@mit.edu>",
      "name": "svg-pathdata",
      "version": "6.0.3",
      "description": "Manipulate SVG path data (path[d] attribute content) simply and efficiently.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:svg-pathdata:svg-pathdata:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/svg-pathdata@6.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/nfroidure/svg-pathdata.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:svg-pathdata:svg_pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:svg_pathdata:svg-pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:svg_pathdata:svg_pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nfroidure:svg-pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nfroidure:svg_pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:svg:svg-pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:svg:svg_pathdata:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/svg-pathdata@6.0.3/node_modules/svg-pathdata/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=amd64&distro=debian-12.15&package-id=ad6415822991d492&upstream=sysvinit",
      "type": "library",
      "publisher": "Debian sysvinit maintainers <debian-init-diversity@chiark.greenend.org.uk>",
      "name": "sysvinit-utils",
      "version": "3.06-4",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        }
      ],
      "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:3.06-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=amd64&distro=debian-12.15&upstream=sysvinit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sysvinit-utils:sysvinit_utils:3.06-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sysvinit_utils:sysvinit-utils:3.06-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sysvinit_utils:sysvinit_utils:3.06-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sysvinit:sysvinit-utils:3.06-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sysvinit:sysvinit_utils:3.06-4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/sysvinit-utils/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/sysvinit-utils.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/sysvinit-utils.list"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "100"
        },
        {
          "name": "syft:metadata:source",
          "value": "sysvinit"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tailwind-merge@3.3.1?package-id=e5f4299bce4c1880",
      "type": "library",
      "author": "Dany Castillo",
      "name": "tailwind-merge",
      "version": "3.3.1",
      "description": "Merge Tailwind CSS classes without style conflicts",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tailwind-merge:tailwind-merge:3.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tailwind-merge@3.3.1",
      "externalReferences": [
        {
          "url": "https://github.com/dcastil/tailwind-merge.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/dcastil/tailwind-merge",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwind-merge:tailwind_merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwind_merge:tailwind-merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwind_merge:tailwind_merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwind:tailwind-merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwind:tailwind_merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcastil:tailwind-merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dcastil:tailwind_merge:3.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tailwind-merge@3.3.1/node_modules/tailwind-merge/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tailwindcss@4.1.14?package-id=7a8927844b12de70",
      "type": "library",
      "name": "tailwindcss",
      "version": "4.1.14",
      "description": "A utility-first CSS framework for rapidly building custom user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tailwindlabs:tailwindcss:4.1.14:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tailwindcss@4.1.14",
      "externalReferences": [
        {
          "url": "https://github.com/tailwindlabs/tailwindcss.git",
          "type": "distribution"
        },
        {
          "url": "https://tailwindcss.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss:tailwindcss:4.1.14:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tailwindcss@4.1.14/node_modules/tailwindcss/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tailwindcss-animate@1.0.7?package-id=c0201cb7aaea12b8",
      "type": "library",
      "author": "Jamie Kyle <me@thejameskyle.com>",
      "name": "tailwindcss-animate",
      "version": "1.0.7",
      "description": "A Tailwind CSS plugin for creating beautiful animations.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tailwindcss-animate:tailwindcss-animate:1.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tailwindcss-animate@1.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss-animate:tailwindcss_animate:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss_animate:tailwindcss-animate:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss_animate:tailwindcss_animate:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss:tailwindcss-animate:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tailwindcss:tailwindcss_animate:1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tailwindcss-animate@1.0.7_tailwindcss@4.1.14/node_modules/tailwindcss-animate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tapable@2.3.0?package-id=5a79e006b36cc51a",
      "type": "library",
      "author": "Tobias Koppers @sokra",
      "name": "tapable",
      "version": "2.3.0",
      "description": "Just a little module for plugins.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tapable:tapable:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tapable@2.3.0",
      "externalReferences": [
        {
          "url": "http://github.com/webpack/tapable.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/webpack/tapable",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webpack:tapable:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tapable@2.3.0/node_modules/tapable/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=f8ad3f5238dbcf6a",
      "type": "library",
      "publisher": "Janos Lenart <ocsi@debian.org>",
      "name": "tar",
      "version": "1.34+dfsg-1.2+deb12u1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar:tar:1.34\\+dfsg-1.2\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/tar/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/tar.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/tar.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/tar.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/tar.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "3144"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar@7.5.1?package-id=0ce05e0d6adb7e81",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "tar",
      "version": "7.5.1",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tar@7.5.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-tar.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_project:tar:7.5.1:*:*:*:*:rust:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.1:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/tar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar@7.5.1?package-id=4234d12ce4c72d36",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "tar",
      "version": "7.5.1",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tar@7.5.1",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-tar.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_project:tar:7.5.1:*:*:*:*:rust:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.1:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tar@7.5.1/node_modules/tar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar@7.5.11?package-id=e0ba1c28acf5b82a",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "tar",
      "version": "7.5.11",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.11:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tar@7.5.11",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-tar.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_project:tar:7.5.11:*:*:*:*:rust:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.11:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/tar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar@7.5.22?package-id=e62015af097901c4",
      "type": "library",
      "author": "Isaac Z. Schlueter",
      "name": "tar",
      "version": "7.5.22",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tar@7.5.22",
      "externalReferences": [
        {
          "url": "https://github.com/isaacs/node-tar.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:rust:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.22:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tar@7.5.22/node_modules/tar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar-fs@2.1.5?package-id=6b79eefe38215d62",
      "type": "library",
      "author": "Mathias Buus",
      "name": "tar-fs",
      "version": "2.1.5",
      "description": "filesystem bindings for tar-stream",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:mafintosh:tar-fs:2.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tar-fs@2.1.5",
      "externalReferences": [
        {
          "url": "https://github.com/mafintosh/tar-fs.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/tar-fs",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:tar_fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar-fs:tar-fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar-fs:tar_fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_fs:tar-fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_fs:tar_fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar-fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar_fs:2.1.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tar-fs@2.1.5/node_modules/tar-fs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tar-stream@2.2.0?package-id=2a31afd3c93180e8",
      "type": "library",
      "author": "Mathias Buus <mathiasbuus@gmail.com>",
      "name": "tar-stream",
      "version": "2.2.0",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tar-stream@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/tar-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/tar-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar-stream:tar_stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_stream:tar-stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_stream:tar_stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:tar-stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:tar_stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar-stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar_stream:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tar-stream@2.2.0/node_modules/tar-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang/tasty-core_3@3.4.1?package-id=9277353bcdcb7f9b",
      "type": "library",
      "name": "tasty-core_3",
      "version": "3.4.1",
      "cpe": "cpe:2.3:a:org.scala-lang:tasty-core-3:3.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-lang/tasty-core_3@3.4.1",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f0f3ae977d428cd33522b8b225a7e791df71a367"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-lang:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core-3:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core-3:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core-3:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core_3:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core_3:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core_3:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core_3:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core_3:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core_3:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty-core:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty_core:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lamp\\/epfl:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty:tasty-core-3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty:tasty-core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tasty:tasty_core_3:3.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.tasty-core_3-3.4.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-lang.tasty-core_3-3.4.1.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/text-encoding-utf-8@1.0.2?package-id=77c50e62fb058268",
      "type": "library",
      "author": "Erik Arvidsson <erik.arvidsson@gmail.com>, Rick Eyre <rick.eyre@outlook.com>, Joshua Bell <inexorabletash@gmail.com>",
      "name": "text-encoding-utf-8",
      "version": "1.0.2",
      "description": "UTF-8 only polyfill for the Encoding Living Standard's API.",
      "licenses": [
        {
          "license": {
            "id": "Unlicense"
          }
        }
      ],
      "cpe": "cpe:2.3:a:text-encoding-utf-8:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/text-encoding-utf-8@1.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/arv/text-encoding-utf-8.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/arv/text-encoding-utf-8",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-encoding-utf-8:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding_utf_8:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding_utf_8:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-encoding-utf:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-encoding-utf:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding_utf:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding_utf:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-encoding:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-encoding:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_encoding:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:arv:text-encoding-utf-8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:arv:text_encoding_utf_8:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/text-encoding-utf-8@1.0.2/node_modules/text-encoding-utf-8/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/text-segmentation@1.0.3?package-id=e05d6c5f3d60b4c1",
      "type": "library",
      "author": "Niklas von Hertzen <niklasvh@gmail.com> (https://hertzen.com)",
      "name": "text-segmentation",
      "version": "1.0.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:text-segmentation:text-segmentation:1.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/text-segmentation@1.0.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/niklasvh/text-segmentation.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/niklasvh/text-segmentation",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-segmentation:text_segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_segmentation:text-segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_segmentation:text_segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:text-segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:niklasvh:text_segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text-segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text_segmentation:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/text-segmentation@1.0.3/node_modules/text-segmentation/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/text-table@0.2.0?package-id=1f03104867bb7226",
      "type": "library",
      "author": "James Halliday <mail@substack.net> (http://substack.net)",
      "name": "text-table",
      "version": "0.2.0",
      "description": "borderless text tables with alignment",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/text-table.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/substack/text-table",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text-table:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_table:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text_table:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:substack:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text-table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:text:text_table:0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/text-table/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tiny-invariant@1.3.3?package-id=890877a3b23ea497",
      "type": "library",
      "author": "Alex Reardon <alexreardon@gmail.com>",
      "name": "tiny-invariant",
      "version": "1.3.3",
      "description": "A tiny invariant function",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tiny-invariant:tiny-invariant:1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tiny-invariant@1.3.3",
      "externalReferences": [
        {
          "url": "https://github.com/alexreardon/tiny-invariant.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-invariant:tiny_invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_invariant:tiny-invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_invariant:tiny_invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alexreardon:tiny-invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alexreardon:tiny_invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny-invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny_invariant:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tiny-invariant@1.3.3/node_modules/tiny-invariant/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bb64d30c83be7c41",
      "type": "library",
      "author": "Joseph Wynn <joseph@wildlyinaccurate.com> (https://wildlyinaccurate.com/)",
      "name": "tiny-relative-date",
      "version": "1.3.0",
      "description": "Tiny function that provides relative, human-readable dates.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tiny-relative-date@1.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/wildlyinaccurate/relative-date.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative-date:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative_date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative_date:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wildlyinaccurate:tiny-relative-date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wildlyinaccurate:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative:tiny-relative-date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny-relative:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative:tiny-relative-date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny_relative:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny-relative-date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tiny:tiny_relative_date:1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinybench@2.9.0?package-id=6a4b0350e8c6eb42",
      "type": "library",
      "name": "tinybench",
      "version": "2.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinybench:tinybench:2.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinybench@2.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinybench@2.9.0/node_modules/tinybench/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyexec@0.3.2?package-id=25cb77d8d3d1be30",
      "type": "library",
      "author": "James Garbutt (https://github.com/43081j)",
      "name": "tinyexec",
      "version": "0.3.2",
      "description": "A minimal library for executing processes in Node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyexec:tinyexec:0.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyexec@0.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/tinylibs/tinyexec.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tinylibs/tinyexec#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tinylibs:tinyexec:0.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinyexec@0.3.2/node_modules/tinyexec/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyexec@1.0.1?package-id=49cef417683e917a",
      "type": "library",
      "author": "James Garbutt (https://github.com/43081j)",
      "name": "tinyexec",
      "version": "1.0.1",
      "description": "A minimal library for executing processes in Node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyexec:tinyexec:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyexec@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/tinylibs/tinyexec.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tinylibs/tinyexec#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tinylibs:tinyexec:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinyexec@1.0.1/node_modules/tinyexec/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyglobby@0.2.15?package-id=b0c874a5607acfcd",
      "type": "library",
      "author": "Superchupu",
      "name": "tinyglobby",
      "version": "0.2.15",
      "description": "A fast and minimal alternative to globby and fast-glob",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyglobby@0.2.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/SuperchupuDev/tinyglobby.git",
          "type": "distribution"
        },
        {
          "url": "https://superchupu.dev/tinyglobby",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinyglobby@0.2.15/node_modules/tinyglobby/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyglobby@0.2.15?package-id=a188786d46b8db0b",
      "type": "library",
      "author": "Superchupu",
      "name": "tinyglobby",
      "version": "0.2.15",
      "description": "A fast and minimal alternative to globby and fast-glob",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.15:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyglobby@0.2.15",
      "externalReferences": [
        {
          "url": "git+https://github.com/SuperchupuDev/tinyglobby.git",
          "type": "distribution"
        },
        {
          "url": "https://superchupu.dev/tinyglobby",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/tinyglobby/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinypool@1.1.1?package-id=6458c0e6663fb44f",
      "type": "library",
      "name": "tinypool",
      "version": "1.1.1",
      "description": "A minimal and tiny Node.js Worker Thread Pool implementation, a fork of piscina, but with fewer features",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinylibs:tinypool:1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinypool@1.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/tinylibs/tinypool.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tinylibs/tinypool#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tinypool:tinypool:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinypool@1.1.1/node_modules/tinypool/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyrainbow@1.2.0?package-id=83ddf3039a8396e9",
      "type": "library",
      "name": "tinyrainbow",
      "version": "1.2.0",
      "description": "A small library to print colourful messages.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinyrainbow:tinyrainbow:1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyrainbow@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tinylibs/tinyrainbow.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tinylibs/tinyrainbow#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tinylibs:tinyrainbow:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinyrainbow@1.2.0/node_modules/tinyrainbow/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tinyspy@3.0.2?package-id=03f291c1ab9b33c8",
      "type": "library",
      "name": "tinyspy",
      "version": "3.0.2",
      "description": "A minimal fork of nanospy, with more features",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tinylibs:tinyspy:3.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tinyspy@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/tinylibs/tinyspy.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tinylibs/tinyspy#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tinyspy:tinyspy:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tinyspy@3.0.2/node_modules/tinyspy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tmp@0.2.7?package-id=788de99207ce2049",
      "type": "library",
      "author": "KARASZI István <github@spam.raszi.hu>, Carsten Klein <trancesilken@gmail.com> (https://github.com/silkentrance)",
      "name": "tmp",
      "version": "0.2.7",
      "description": "Temporary file and directory creator",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:raszi:tmp:0.2.7:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/tmp@0.2.7",
      "externalReferences": [
        {
          "url": "https://github.com/raszi/node-tmp.git",
          "type": "distribution"
        },
        {
          "url": "http://github.com/raszi/node-tmp",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tmp@0.2.7/node_modules/tmp/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/toidentifier@1.0.1?package-id=446b4135c40c5c88",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Nick Baugh <niftylettuce@gmail.com> (http://niftylettuce.com/)",
      "name": "toidentifier",
      "version": "1.0.1",
      "description": "Convert a string of words to a JavaScript identifier",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/toidentifier@1.0.1/node_modules/toidentifier/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tr46@0.0.3?package-id=cf71821a217b1c5f",
      "type": "library",
      "author": "Sebastian Mayr <npm@smayr.name>",
      "name": "tr46",
      "version": "0.0.3",
      "description": "An implementation of the Unicode TR46 spec",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:Sebmaster:tr46:0.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/Sebmaster/tr46.js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Sebmaster/tr46.js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tr46:tr46:0.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tr46@0.0.3/node_modules/tr46/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/traverse@0.3.9?package-id=b8b5148c8fea1abb",
      "type": "library",
      "author": "James Halliday",
      "name": "traverse",
      "version": "0.3.9",
      "description": "Traverse and transform objects by visiting every node on a recursive walk",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "cpe": "cpe:2.3:a:substack:traverse:0.3.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/traverse@0.3.9",
      "externalReferences": [
        {
          "url": "http://github.com/substack/js-traverse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/traverse@0.3.9/node_modules/traverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/treeverse@3.0.0?package-id=1a0db5957661f5f4",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "treeverse",
      "version": "3.0.0",
      "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:treeverse:treeverse:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/treeverse@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/npm/treeverse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:treeverse:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/treeverse@3.0.0/node_modules/treeverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/treeverse@3.0.0?package-id=fdbc373e47fb6d77",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "treeverse",
      "version": "3.0.0",
      "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:treeverse:treeverse:3.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/treeverse@3.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/npm/treeverse.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:treeverse:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/treeverse/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/trim-lines@3.0.1?package-id=e448bfe3d4c444e9",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "trim-lines",
      "version": "3.0.1",
      "description": "Remove spaces and tabs around line-breaks",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:trim-lines:trim-lines:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/trim-lines@3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trim-lines:trim_lines:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trim_lines:trim-lines:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trim_lines:trim_lines:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trim:trim-lines:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:trim:trim_lines:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/trim-lines@3.0.1/node_modules/trim-lines/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/trivy-cdxgen?package-id=b5b05282f30f519d",
      "type": "library",
      "name": "trivy-cdxgen",
      "version": "UNKNOWN",
      "purl": "pkg:golang/trivy-cdxgen",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linuxmusl-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64/plugins/trivy/trivy-cdxgen-linuxmusl-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/trivy-cdxgen@v0.0.0-20260613212014-4edd3409b343?package-id=e8efcbd5e348ae29",
      "type": "library",
      "name": "trivy-cdxgen",
      "version": "v0.0.0-20260613212014-4edd3409b343",
      "purl": "pkg:golang/trivy-cdxgen@v0.0.0-20260613212014-4edd3409b343",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.5.1/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/trivy/trivy-cdxgen-linux-amd64"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.25.11"
        },
        {
          "name": "syft:metadata:goExperiments:0",
          "value": "jsonv2"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "trivy-cdxgen"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/trough@2.2.0?package-id=9e6b2af3a20cc1b0",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "trough",
      "version": "2.2.0",
      "description": "`trough` is middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:trough:trough:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/trough@2.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/trough@2.2.0/node_modules/trough/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ts-dedent@2.2.0?package-id=d084b6b450f5bff7",
      "type": "library",
      "author": "Tamino Martinius <dev@zaku.eu>",
      "name": "ts-dedent",
      "version": "2.2.0",
      "description": "TypeScript package which smartly trims and strips indentation from multi-line strings",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tamino-martinius:ts-dedent:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ts-dedent@2.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/tamino-martinius/node-ts-dedent.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tamino-martinius:ts_dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts-dedent:ts-dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts-dedent:ts_dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts_dedent:ts-dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts_dedent:ts_dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts:ts-dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ts:ts_dedent:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ts-dedent@2.2.0/node_modules/ts-dedent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tslib@2.7.0?package-id=9130701c30b7e83d",
      "type": "library",
      "author": "Microsoft Corp.",
      "name": "tslib",
      "version": "2.7.0",
      "description": "Runtime library for TypeScript helper functions",
      "licenses": [
        {
          "license": {
            "id": "0BSD"
          }
        }
      ],
      "cpe": "cpe:2.3:a:Microsoft:tslib:2.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tslib@2.7.0",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/tslib.git",
          "type": "distribution"
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tslib:tslib:2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tslib@2.7.0/node_modules/tslib/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tslib@2.8.1?package-id=6cad84b587fee875",
      "type": "library",
      "author": "Microsoft Corp.",
      "name": "tslib",
      "version": "2.8.1",
      "description": "Runtime library for TypeScript helper functions",
      "licenses": [
        {
          "license": {
            "id": "0BSD"
          }
        }
      ],
      "cpe": "cpe:2.3:a:Microsoft:tslib:2.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/tslib.git",
          "type": "distribution"
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tslib:tslib:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tslib@2.8.1/node_modules/tslib/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tsx@4.20.6?package-id=98198519b47d2cbb",
      "type": "library",
      "author": "Hiroki Osame <hiroki.osame@gmail.com>",
      "name": "tsx",
      "version": "4.20.6",
      "description": "TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tsx:tsx:4.20.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tsx@4.20.6",
      "externalReferences": [
        {
          "url": "https://tsx.is",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tsx@4.20.6/node_modules/tsx/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tuf-js@3.1.0?package-id=d5e4def26705b501",
      "type": "library",
      "author": "bdehamer@github.com",
      "name": "tuf-js",
      "version": "3.1.0",
      "description": "JavaScript implementation of The Update Framework (TUF)",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:theupdateframework:tuf-js:3.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tuf-js@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/theupdateframework/tuf-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:tuf_js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf-js:tuf-js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf-js:tuf_js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf_js:tuf-js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf_js:tuf_js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf:tuf-js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tuf:tuf_js:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/tuf-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=87edb1ad373f5d9d",
      "type": "library",
      "author": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "url": "https://github.com/mikeal/tunnel-agent",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mikeal:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mikeal:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tunnel-agent@0.6.0/node_modules/tunnel-agent/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/tw-animate-css@1.4.0?package-id=419ccab5ae8d0507",
      "type": "library",
      "author": "Luca Bosin (https://github.com/Wombosvideo)",
      "name": "tw-animate-css",
      "version": "1.4.0",
      "description": "TailwindCSS v4.0 compatible replacement for `tailwindcss-animate`.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tw-animate-css:tw-animate-css:1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/tw-animate-css@1.4.0",
      "externalReferences": [
        {
          "url": "https://github.com/Wombosvideo/tw-animate-css#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw-animate-css:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw_animate_css:tw-animate-css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw_animate_css:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Wombosvideo:tw-animate-css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Wombosvideo:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw-animate:tw-animate-css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw-animate:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw_animate:tw-animate-css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw_animate:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw:tw-animate-css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tw:tw_animate_css:1.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/tw-animate-css@1.4.0/node_modules/tw-animate-css/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/type-is@1.6.18?package-id=d47467153ff630fe",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "type-is",
      "version": "1.6.18",
      "description": "Infer the content-type of a request.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*",
      "purl": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/type-is@1.6.18/node_modules/type-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/type-is@2.1.0?package-id=be0df8b6aa7df901",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "name": "type-is",
      "version": "2.1.0",
      "description": "Infer the content-type of a request.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:type-is:type-is:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/type-is@2.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type-is:type_is:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type_is:type-is:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type_is:type_is:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type:type-is:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:type:type_is:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/type-is@2.1.0/node_modules/type-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/typescript@5.6.3?package-id=102d3dc05a673857",
      "type": "library",
      "author": "Microsoft Corp.",
      "name": "typescript",
      "version": "5.6.3",
      "description": "TypeScript is a language for application scale JavaScript development",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:typescript:typescript:5.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/typescript@5.6.3",
      "externalReferences": [
        {
          "url": "https://github.com/microsoft/TypeScript.git",
          "type": "distribution"
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:typescript:5.6.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/typescript@5.6.3/node_modules/typescript/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/typescript@6.0.3?package-id=214edf8ff20c19cc",
      "type": "library",
      "author": "Microsoft Corp.",
      "name": "typescript",
      "version": "6.0.3",
      "description": "TypeScript is a language for application scale JavaScript development",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:typescript:typescript:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/typescript@6.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/microsoft/TypeScript.git",
          "type": "distribution"
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:typescript:6.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/typescript@6.0.3/node_modules/typescript/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/tzdata@2026b-0%2Bdeb12u1?arch=all&distro=debian-12.15&package-id=d46071bbd0f9a5a0",
      "type": "library",
      "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
      "name": "tzdata",
      "version": "2026b-0+deb12u1",
      "licenses": [
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:tzdata:tzdata:2026b-0\\+deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/tzdata@2026b-0%2Bdeb12u1?arch=all&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/tzdata/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/tzdata.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/tzdata.config"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/tzdata.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/tzdata.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/tzdata.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/tzdata.preinst"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:8:path",
          "value": "/var/lib/dpkg/info/tzdata.prerm"
        },
        {
          "name": "syft:location:9:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:9:path",
          "value": "/var/lib/dpkg/info/tzdata.templates"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "2573"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ufo@1.6.1?package-id=c9b2c724fbc273d6",
      "type": "library",
      "name": "ufo",
      "version": "1.6.1",
      "description": "URL utils for humans",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ufo:ufo:1.6.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/ufo@1.6.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ufo@1.6.1/node_modules/ufo/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/ujson_3@4.4.3?package-id=4d8f700923a5de5e",
      "type": "library",
      "name": "ujson_3",
      "version": "4.4.3",
      "cpe": "cpe:2.3:a:com.lihaoyi:ujson-3:4.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/ujson_3@4.4.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5239968e7742af8b22b5c1f808fe2ce82e26d0d6"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:ujson_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:ujson-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:ujson_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson-3:ujson-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson-3:ujson_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson_3:ujson-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson_3:ujson_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson:ujson-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ujson:ujson_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.ujson_3-4.4.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.ujson_3-4.4.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/undici@7.28.0?package-id=5d5c51040f22ade1",
      "type": "library",
      "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)",
      "name": "undici",
      "version": "7.28.0",
      "description": "An HTTP/1.1 client, written from scratch for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nodejs:undici:7.28.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/undici@7.28.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodejs/undici.git",
          "type": "distribution"
        },
        {
          "url": "https://undici.nodejs.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/undici@7.28.0/node_modules/undici/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/undici-types@6.19.8?package-id=e1ba4e57e534149e",
      "type": "library",
      "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)",
      "name": "undici-types",
      "version": "6.19.8",
      "description": "A stand-alone types package for Undici",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:undici-types:undici-types:6.19.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/undici-types@6.19.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodejs/undici.git",
          "type": "distribution"
        },
        {
          "url": "https://undici.nodejs.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici-types:undici_types:6.19.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici_types:undici-types:6.19.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici_types:undici_types:6.19.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici:undici-types:6.19.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici:undici_types:6.19.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/undici-types@6.19.8/node_modules/undici-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/undici-types@7.14.0?package-id=4f3248b4ce64adaf",
      "type": "library",
      "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)",
      "name": "undici-types",
      "version": "7.14.0",
      "description": "A stand-alone types package for Undici",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:undici-types:undici-types:7.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/undici-types@7.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodejs/undici.git",
          "type": "distribution"
        },
        {
          "url": "https://undici.nodejs.org",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici-types:undici_types:7.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici_types:undici-types:7.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici_types:undici_types:7.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici:undici-types:7.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:undici:undici_types:7.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/undici-types@7.14.0/node_modules/undici-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unified@11.0.5?package-id=ba6e842f45ea0d7f",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Junyoung Choi <fluke8259@gmail.com>, Hernan Rajchert <hrajchert@gmail.com>, Christian Murphy <christian.murphy.42@gmail.com>, Vse Mozhet Byt <vsemozhetbyt@gmail.com>, Richard Littauer <richard.littauer@gmail.com>",
      "name": "unified",
      "version": "11.0.5",
      "description": "parse, inspect, transform, and serialize content through syntax trees",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unified:unified:11.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unified@11.0.5",
      "externalReferences": [
        {
          "url": "https://unifiedjs.com",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unified@11.0.5/node_modules/unified/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-filename@4.0.0?package-id=6892bed18ca60737",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-filename",
      "version": "4.0.0",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-filename@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-filename.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/unique-filename",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/unique-filename/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-filename@4.0.0?package-id=c48cae9bcb3f8ac6",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-filename",
      "version": "4.0.0",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-filename@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-filename.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/unique-filename",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unique-filename@4.0.0/node_modules/unique-filename/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-filename@4.0.0?package-id=4dbb275edde9893e",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-filename",
      "version": "4.0.0",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-filename@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-filename.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/iarna/unique-filename",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/unique-filename/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-slug@5.0.0?package-id=ae676697bf788eeb",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-slug",
      "version": "5.0.0",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-slug@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-slug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/unique-slug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-slug@5.0.0?package-id=104fd2cadbf0af6a",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-slug",
      "version": "5.0.0",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-slug@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-slug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unique-slug@5.0.0/node_modules/unique-slug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unique-slug@5.0.0?package-id=1ca2d62a97c43c19",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "unique-slug",
      "version": "5.0.0",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unique-slug@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/unique-slug.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/unique-slug/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-find-after@5.0.0?package-id=860da7fa156a93f2",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "unist-util-find-after",
      "version": "5.0.0",
      "description": "unist utility to find a node after another node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-find-after:unist-util-find-after:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-find-after@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-find-after:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_find_after:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_find_after:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-find:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-find:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_find:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_find:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-find-after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_find_after:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-find-after@5.0.0/node_modules/unist-util-find-after/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-is@6.0.1?package-id=c868460f677b41aa",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Christian Murphy <christian.murphy.42@gmail.com>, Lucas Brandstaetter <lucas@brandstaetter.tech> (https://github.com/Roang-zero1)",
      "name": "unist-util-is",
      "version": "6.0.1",
      "description": "unist utility to check if a node passes a test",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-is:unist-util-is:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-is@6.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-is:unist_util_is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_is:unist-util-is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_is:unist_util_is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_is:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-is@6.0.1/node_modules/unist-util-is/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-position@5.0.0?package-id=ee714ccb61e4b039",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "unist-util-position",
      "version": "5.0.0",
      "description": "unist utility to get the position of a node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-position:unist-util-position:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-position@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-position:unist_util_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_position:unist-util-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_position:unist_util_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-position@5.0.0/node_modules/unist-util-position/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-remove-position@5.0.0?package-id=48dfac0381e4ede2",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Merlijn Vos <merlijn@soverin.net>",
      "name": "unist-util-remove-position",
      "version": "5.0.0",
      "description": "unist utility to remove positions from a tree",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-remove-position:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-remove-position@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-remove-position:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_remove_position:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_remove_position:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-remove:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-remove:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_remove:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_remove:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-remove-position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_remove_position:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-remove-position@5.0.0/node_modules/unist-util-remove-position/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-stringify-position@4.0.0?package-id=e7091caab6d6e60a",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "unist-util-stringify-position",
      "version": "4.0.0",
      "description": "unist utility to serialize a node, position, or point as a human readable location",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-stringify-position:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-stringify-position@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-stringify-position:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_stringify_position:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_stringify_position:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-stringify:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-stringify:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_stringify:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_stringify:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-stringify-position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_stringify_position:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-stringify-position@4.0.0/node_modules/unist-util-stringify-position/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-visit@5.0.0?package-id=b5caf47d363a07cc",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Eugene Sharygin <eush77@gmail.com>, Richard Gibson <richard.gibson@gmail.com>",
      "name": "unist-util-visit",
      "version": "5.0.0",
      "description": "unist utility to visit nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-visit:unist-util-visit:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-visit@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-visit:unist_util_visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit:unist-util-visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit:unist_util_visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_visit:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-visit@5.0.0/node_modules/unist-util-visit/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unist-util-visit-parents@6.0.2?package-id=06aa12e93856d73c",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "unist-util-visit-parents",
      "version": "6.0.2",
      "description": "unist utility to recursively walk over nodes, with ancestral information",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unist-util-visit-parents:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unist-util-visit-parents@6.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-visit-parents:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit_parents:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit_parents:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-visit:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util-visit:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util_visit:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist-util:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist_util:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist-util-visit-parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unist:unist_util_visit_parents:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unist-util-visit-parents@6.0.2/node_modules/unist-util-visit-parents/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=1a1820eb2274fdef",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "unpipe",
      "version": "1.0.0",
      "description": "Unpipe a stream from all destinations",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unpipe@1.0.0/node_modules/unpipe/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/unzipper@0.10.14?package-id=7631d423951fdc33",
      "type": "library",
      "author": "Evan Oxfeld <eoxfeld@gmail.com>, Ziggy Jonsson <ziggy.jonsson.nyc@gmail.com>, Evan Oxfeld <eoxfeld@gmail.com>, Joe Ferner <joe.ferner@nearinfinity.com>",
      "name": "unzipper",
      "version": "0.10.14",
      "description": "Unzip cross-platform streaming API ",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:unzipper_project:unzipper:0.10.14:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/unzipper@0.10.14",
      "externalReferences": [
        {
          "url": "https://github.com/ZJONSSON/node-unzipper.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/unzipper@0.10.14/node_modules/unzipper/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/upack_3@4.4.3?package-id=047c9e68f455ba4c",
      "type": "library",
      "name": "upack_3",
      "version": "4.4.3",
      "cpe": "cpe:2.3:a:com.lihaoyi:upack-3:4.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/upack_3@4.4.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "27ac236c20ea202862a33ca5d61753f31b1f85c5"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upack_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upack-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upack_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack-3:upack-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack-3:upack_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack_3:upack-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack_3:upack_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack:upack-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upack:upack_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upack_3-4.4.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upack_3-4.4.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/update-browserslist-db@1.1.3?package-id=e86549e3f8fac078",
      "type": "library",
      "author": "Andrey Sitnik <andrey@sitnik.ru>",
      "name": "update-browserslist-db",
      "version": "1.1.3",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:update-browserslist-db:update-browserslist-db:1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/update-browserslist-db@1.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update-browserslist-db:update_browserslist_db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update_browserslist_db:update-browserslist-db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update_browserslist_db:update_browserslist_db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update-browserslist:update-browserslist-db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update-browserslist:update_browserslist_db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update_browserslist:update-browserslist-db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update_browserslist:update_browserslist_db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update:update-browserslist-db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:update:update_browserslist_db:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/update-browserslist-db@1.1.3_browserslist@4.26.3/node_modules/update-browserslist-db/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/upickle-core_3@4.4.3?package-id=f70e96b0b0c03a4a",
      "type": "library",
      "name": "upickle-core_3",
      "version": "4.4.3",
      "cpe": "cpe:2.3:a:upickle-core-3:upickle-core-3:4.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/upickle-core_3@4.4.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e87aec8db17580248900cc70683ae19a41e0e11e"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core-3:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core-3:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core_3:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core_3:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core_3:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core_3:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core_3:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core_3:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-core:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_core:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle-core-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle-core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle_core_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle-core_3-4.4.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle-core_3-4.4.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/upickle-implicits_3@4.4.3?package-id=24770dd725dec0b9",
      "type": "library",
      "name": "upickle-implicits_3",
      "version": "4.4.3",
      "cpe": "cpe:2.3:a:upickle-implicits-3:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/upickle-implicits_3@4.4.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ad9ec405bcf539a0b9ceecd93b6b5fd1c3bbf5b5"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits-3:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits-3:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits_3:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits_3:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits_3:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits_3:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits_3:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits_3:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-implicits:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_implicits:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle-implicits-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle-implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle_implicits_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle-implicits_3-4.4.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle-implicits_3-4.4.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.lihaoyi/upickle_3@4.4.3?package-id=17c4aeed7bb62487",
      "type": "library",
      "name": "upickle_3",
      "version": "4.4.3",
      "cpe": "cpe:2.3:a:com.lihaoyi:upickle-3:4.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.lihaoyi/upickle_3@4.4.3",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5aa6f3d3c5f4bd5332de65d79b2f0380a0f76506"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.lihaoyi:upickle_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-3:upickle-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle-3:upickle_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_3:upickle-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle_3:upickle_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lihaoyi:upickle_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle-3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:upickle:upickle_3:4.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle_3-4.4.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.lihaoyi.upickle_3-4.4.3.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=d15d1b441b15b7e5",
      "type": "library",
      "author": "Gary Court <gary.court@gmail.com>",
      "name": "uri-js",
      "version": "4.4.1",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "url": "http://github.com/garycourt/uri-js",
          "type": "distribution"
        },
        {
          "url": "https://github.com/garycourt/uri-js",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/uri-js@4.4.1/node_modules/uri-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/use-callback-ref@1.3.3?package-id=666f893171a0eb59",
      "type": "library",
      "author": "theKashey <thekashey@gmail.com>",
      "name": "use-callback-ref",
      "version": "1.3.3",
      "description": "The same useRef, but with callback",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:use-callback-ref:use-callback-ref:1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/use-callback-ref@1.3.3",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/use-callback-ref/",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-callback-ref:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_callback_ref:use-callback-ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_callback_ref:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-callback:use-callback-ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-callback:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_callback:use-callback-ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_callback:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:use-callback-ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use-callback-ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use_callback_ref:1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/use-callback-ref@1.3.3_@types+react@19.2.1_react@19.2.1/node_modules/use-callback-ref/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/use-sidecar@1.1.3?package-id=b69d8e991e7bbae5",
      "type": "library",
      "author": "theKashey <thekashey@gmail.com>",
      "name": "use-sidecar",
      "version": "1.1.3",
      "description": "Sidecar code splitting utils",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:use-sidecar:use-sidecar:1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/use-sidecar@1.1.3",
      "externalReferences": [
        {
          "url": "https://github.com/theKashey/use-sidecar",
          "type": "distribution"
        },
        {
          "url": "https://github.com/theKashey/use-sidecar",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sidecar:use_sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sidecar:use-sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sidecar:use_sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:use-sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theKashey:use_sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use-sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use_sidecar:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/use-sidecar@1.1.3_@types+react@19.2.1_react@19.2.1/node_modules/use-sidecar/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/use-sync-external-store@1.6.0?package-id=e1b304d831910645",
      "type": "library",
      "name": "use-sync-external-store",
      "version": "1.6.0",
      "description": "Backwards compatible shim for React's useSyncExternalStore. Works with any React that supports hooks.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:use-sync-external-store:use-sync-external-store:1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/use-sync-external-store@1.6.0",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/react.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sync-external-store:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync_external_store:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync_external_store:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sync-external:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sync-external:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync_external:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync_external:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:facebook:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sync:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use-sync:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use_sync:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use-sync-external-store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:use:use_sync_external_store:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/use-sync-external-store@1.6.0_react@19.2.1/node_modules/use-sync-external-store/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/usr-is-merged@37~deb12u1?arch=all&distro=debian-12.15&package-id=5d5368e5a339ea05&upstream=usrmerge",
      "type": "library",
      "publisher": "Marco d'Itri <md@linux.it>",
      "name": "usr-is-merged",
      "version": "37~deb12u1",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        }
      ],
      "cpe": "cpe:2.3:a:usr-is-merged:usr-is-merged:37\\~deb12u1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/usr-is-merged@37~deb12u1?arch=all&distro=debian-12.15&upstream=usrmerge",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr-is-merged:usr_is_merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr_is_merged:usr-is-merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr_is_merged:usr_is_merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr-is:usr-is-merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr-is:usr_is_merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr_is:usr-is-merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr_is:usr_is_merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr:usr-is-merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:usr:usr_is_merged:37\\~deb12u1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/usr-is-merged/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/usr-is-merged.md5sums"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/usr-is-merged.list"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/usr-is-merged.postinst"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/usr-is-merged.preinst"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "13"
        },
        {
          "name": "syft:metadata:source",
          "value": "usrmerge"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/utf-8-validate@6.0.6?package-id=0d9dc1aeeacf748c",
      "type": "library",
      "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
      "name": "utf-8-validate",
      "version": "6.0.6",
      "description": "Check if a buffer contains valid UTF-8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:utf-8-validate:utf-8-validate:6.0.6:*:*:*:*:*:*:*",
      "purl": "pkg:npm/utf-8-validate@6.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/websockets/utf-8-validate.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/websockets/utf-8-validate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf-8-validate:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf_8_validate:utf-8-validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf_8_validate:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:websockets:utf-8-validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:websockets:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf-8:utf-8-validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf-8:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf_8:utf-8-validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf_8:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf:utf-8-validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utf:utf_8_validate:6.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/utf-8-validate@6.0.6/node_modules/utf-8-validate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=fb298456a5cb9ade",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/util-deprecate@1.0.2/node_modules/util-deprecate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=335b4279a8891fd2",
      "type": "library",
      "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.scala-sbt/util-interface@1.9.8?package-id=2b701bd9f63a5e1b",
      "type": "library",
      "name": "util-interface",
      "version": "1.9.8",
      "cpe": "cpe:2.3:a:util-interface:util-interface:1.9.8:*:*:*:*:*:*:*",
      "purl": "pkg:maven/org.scala-sbt/util-interface@1.9.8",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66e6a0a160e445df79f9b256f66dc2bde9d6b57a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-interface:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_interface:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_interface:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-sbt:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.scala-sbt:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-sbt:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-sbt:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_sbt:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_sbt:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_interface:1.9.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-sbt.util-interface-1.9.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/org.scala-sbt.util-interface-1.9.8.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=b11f4a313957922c",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "util-linux",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:util-linux:util-linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-linux:util_linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux:util-linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux:util_linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_linux:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/util-linux/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/util-linux.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/util-linux.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/util-linux.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/util-linux.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/util-linux.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/util-linux.prerm"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "4978"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=fc9180bcad1f4d49&upstream=util-linux",
      "type": "library",
      "publisher": "util-linux packagers <util-linux@packages.debian.org>",
      "name": "util-linux-extra",
      "version": "2.38.1-5+deb12u3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "GPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.0-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-only"
          }
        },
        {
          "license": {
            "id": "LGPL-3.0-or-later"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "BSLA"
          }
        },
        {
          "license": {
            "name": "LGPL"
          }
        },
        {
          "license": {
            "name": "public-domain"
          }
        }
      ],
      "cpe": "cpe:2.3:a:util-linux-extra:util-linux-extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&upstream=util-linux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-linux-extra:util_linux_extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux_extra:util-linux-extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux_extra:util_linux_extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-linux:util-linux-extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util-linux:util_linux_extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux:util-linux-extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util_linux:util_linux_extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util-linux-extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util_linux_extra:2.38.1-5\\+deb12u3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/util-linux-extra/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.conffiles"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.md5sums"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.list"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:5:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.postinst"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:6:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.postrm"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:7:path",
          "value": "/var/lib/dpkg/info/util-linux-extra.preinst"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "366"
        },
        {
          "name": "syft:metadata:source",
          "value": "util-linux"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=400d5ed4453b3d76",
      "type": "library",
      "author": "Jared Hanson <jaredhanson@gmail.com> (http://www.jaredhanson.net/)",
      "name": "utils-merge",
      "version": "1.0.1",
      "description": "merge() utility function",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/jaredhanson/utils-merge.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaredhanson:utils_merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/utils-merge@1.0.1/node_modules/utils-merge/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/utrie@1.0.2?package-id=e457517fcc222099",
      "type": "library",
      "author": "Niklas von Hertzen <niklasvh@gmail.com> (https://hertzen.com)",
      "name": "utrie",
      "version": "1.0.2",
      "description": "Unicode Trie",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:niklasvh:utrie:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/utrie@1.0.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/niklasvh/utrie.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/niklasvh/utrie",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:utrie:utrie:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/utrie@1.0.2/node_modules/utrie/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/uuid@11.1.0?package-id=d5bdff261c932237",
      "type": "library",
      "name": "uuid",
      "version": "11.1.0",
      "description": "RFC9562 UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:uuidjs:uuid:11.1.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/uuid@11.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/uuidjs/uuid.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/uuid@11.1.0/node_modules/uuid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/uuid@14.0.1?package-id=3905d1f2f823cb94",
      "type": "library",
      "name": "uuid",
      "version": "14.0.1",
      "description": "RFC9562 UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:uuidjs:uuid:14.0.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/uuid@14.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/uuidjs/uuid.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/uuid@14.0.1/node_modules/uuid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/uuid@8.3.2?package-id=794837608b0df812",
      "type": "library",
      "name": "uuid",
      "version": "8.3.2",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/uuid@8.3.2",
      "externalReferences": [
        {
          "url": "https://github.com/uuidjs/uuid.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/uuid@8.3.2/node_modules/uuid/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/v8-compile-cache@2.4.0?package-id=014a8dc338d77501",
      "type": "library",
      "author": "Andres Suarez <zertosh@gmail.com>",
      "name": "v8-compile-cache",
      "version": "2.4.0",
      "description": "Require hook for automatic V8 compile cache persistence",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:v8-compile-cache:v8-compile-cache:2.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/v8-compile-cache@2.4.0",
      "externalReferences": [
        {
          "url": "https://github.com/zertosh/v8-compile-cache.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8-compile-cache:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8_compile_cache:v8-compile-cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8_compile_cache:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8-compile:v8-compile-cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8-compile:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8_compile:v8-compile-cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8_compile:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zertosh:v8-compile-cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zertosh:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8:v8-compile-cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:v8:v8_compile_cache:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/v8-compile-cache/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=de0bab3190e132ce",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com), Mark Stacey <markjstacey@gmail.com>",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package-license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/validate-npm-package-license@3.0.4/node_modules/validate-npm-package-license/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=2465e053544714c0",
      "type": "library",
      "author": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com), Mark Stacey <markjstacey@gmail.com>",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package-license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/validate-npm-package-name@6.0.2?package-id=2399348e08e142fd",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "validate-npm-package-name",
      "version": "6.0.2",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/validate-npm-package-name@6.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/validate-npm-package-name.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/validate-npm-package-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package-name:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate-npm-package-name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate_npm_package_name:6.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/validate-npm-package-name@7.0.2?package-id=53aa938f34c5c78d",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "validate-npm-package-name",
      "version": "7.0.2",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/validate-npm-package-name@7.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/validate-npm-package-name.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/validate-npm-package-name",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package-name:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package_name:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate-npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate_npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validate:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate-npm-package-name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:validate_npm_package_name:7.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/validate-npm-package-name@7.0.2/node_modules/validate-npm-package-name/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vary@1.1.2?package-id=312da95547c3b57b",
      "type": "library",
      "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
      "name": "vary",
      "version": "1.1.2",
      "description": "Manipulate the HTTP Vary header",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vary@1.1.2/node_modules/vary/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vaul@1.1.2?package-id=c8535cc4d3e0e0e2",
      "type": "library",
      "author": "Emil Kowalski <e@emilkowal.ski>",
      "name": "vaul",
      "version": "1.1.2",
      "description": "Drawer component for React.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:emilkowalski:vaul:1.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vaul@1.1.2",
      "externalReferences": [
        {
          "url": "https://github.com/emilkowalski/vaul.git",
          "type": "distribution"
        },
        {
          "url": "https://vaul.emilkowal.ski/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vaul:vaul:1.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vaul@1.1.2_@types+react-dom@19.2.1_@types+react@19.2.1__@types+react@19.2.1_react-dom@19.2.1_react@19.2.1__react@19.2.1/node_modules/vaul/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.michaelpollmeier/versionsort@1.0.17?package-id=7d675150085476d8",
      "type": "library",
      "name": "versionsort",
      "version": "1.0.17",
      "cpe": "cpe:2.3:a:com.michaelpollmeier:versionsort:1.0.17:*:*:*:*:*:*:*",
      "purl": "pkg:maven/com.michaelpollmeier/versionsort@1.0.17",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "da06c464e4e33ba699f35008183395d262fa2983"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:michaelpollmeier:versionsort:1.0.17:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:versionsort:versionsort:1.0.17:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.michaelpollmeier.versionsort-1.0.17.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/com.michaelpollmeier.versionsort-1.0.17.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vfile@6.0.3?package-id=97321a6111600ed1",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Brendan Abbott <brendan.abbott@temando.com>, Denys Dovhan <email@denysdovhan.com>, Kyle Mathews <mathews.kyle@gmail.com>, Shinnosuke Watanabe <snnskwtnb@gmail.com>, Sindre Sorhus <sindresorhus@gmail.com>",
      "name": "vfile",
      "version": "6.0.3",
      "description": "Virtual file format for text processing",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vfile:vfile:6.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vfile@6.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vfile@6.0.3/node_modules/vfile/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vfile-location@5.0.3?package-id=c1bf01e3b66ed77b",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Christian Murphy <christian.murphy.42@gmail.com>",
      "name": "vfile-location",
      "version": "5.0.3",
      "description": "vfile utility to convert between positional (line and column-based) and offset (range-based) locations",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vfile-location:vfile-location:5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vfile-location@5.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile-location:vfile_location:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile_location:vfile-location:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile_location:vfile_location:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile:vfile-location:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile:vfile_location:5.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vfile-location@5.0.3/node_modules/vfile-location/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vfile-message@4.0.3?package-id=f8eab151889a8342",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "vfile-message",
      "version": "4.0.3",
      "description": "vfile utility to create a virtual message",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vfile-message:vfile-message:4.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vfile-message@4.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile-message:vfile_message:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile_message:vfile-message:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile_message:vfile_message:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile:vfile-message:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vfile:vfile_message:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vfile-message@4.0.3/node_modules/vfile-message/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/victory-vendor@36.9.2?package-id=0e2314b890e1ee9e",
      "type": "library",
      "author": "Formidable",
      "name": "victory-vendor",
      "version": "36.9.2",
      "description": "Vendored dependencies for Victory",
      "licenses": [
        {
          "expression": "MIT AND ISC"
        }
      ],
      "cpe": "cpe:2.3:a:FormidableLabs:victory-vendor:36.9.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/victory-vendor@36.9.2",
      "externalReferences": [
        {
          "url": "https://github.com/FormidableLabs/victory",
          "type": "distribution"
        },
        {
          "url": "https://commerce.nearform.com/open-source/victory",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:FormidableLabs:victory_vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory-vendor:victory-vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory-vendor:victory_vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory_vendor:victory-vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory_vendor:victory_vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory:victory-vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:victory:victory_vendor:36.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/victory-vendor@36.9.2/node_modules/victory-vendor/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vite@5.4.20?package-id=b36619ae7f3cd5eb",
      "type": "library",
      "author": "Evan You",
      "name": "vite",
      "version": "5.4.20",
      "description": "Native-ESM powered web dev build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vitejs:vite:5.4.20:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/vite@5.4.20",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitejs/vite.git",
          "type": "distribution"
        },
        {
          "url": "https://vite.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vite@5.4.20_@types+node@24.7.0_lightningcss@1.30.1/node_modules/vite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vite@7.1.9?package-id=09b1cf51a89fdd10",
      "type": "library",
      "author": "Evan You",
      "name": "vite",
      "version": "7.1.9",
      "description": "Native-ESM powered web dev build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vitejs:vite:7.1.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/vite@7.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitejs/vite.git",
          "type": "distribution"
        },
        {
          "url": "https://vite.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6/node_modules/vite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vite@7.1.9?package-id=00a06d1b75b2a4b2",
      "type": "library",
      "author": "Evan You",
      "name": "vite",
      "version": "7.1.9",
      "description": "Native-ESM powered web dev build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vitejs:vite:7.1.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/vite@7.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitejs/vite.git",
          "type": "distribution"
        },
        {
          "url": "https://vite.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vite@7.1.9_@types+node@24.7.0_jiti@2.6.1_lightningcss@1.30.1_tsx@4.20.6_yaml@2.9.0/node_modules/vite/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vite-node@2.1.9?package-id=f55adf080dab7c30",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "vite-node",
      "version": "2.1.9",
      "description": "Vite as Node.js runtime",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vitest-dev:vite-node:2.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vite-node@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest/blob/main/packages/vite-node#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vitest-dev:vite_node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite-node:vite-node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite-node:vite_node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite_node:vite-node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite_node:vite_node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite:vite-node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vite:vite_node:2.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vite-node@2.1.9_@types+node@24.7.0_lightningcss@1.30.1/node_modules/vite-node/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vitest@2.1.9?package-id=a0a09f2da72831b8",
      "type": "library",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "name": "vitest",
      "version": "2.1.9",
      "description": "Next generation testing framework powered by Vite",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vitest.dev:vitest:2.1.9:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/vitest@2.1.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/vitest-dev/vitest.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/vitest-dev/vitest#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vitest@2.1.9_@types+node@24.7.0_lightningcss@1.30.1/node_modules/vitest/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-jsonrpc@8.2.0?package-id=a1de410b2c257fd5",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "vscode-jsonrpc",
      "version": "8.2.0",
      "description": "A json rpc implementation over streams",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-jsonrpc:vscode-jsonrpc:8.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-jsonrpc@8.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/vscode-languageserver-node.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-jsonrpc:vscode_jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_jsonrpc:vscode-jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_jsonrpc:vscode_jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode-jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode_jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_jsonrpc:8.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-jsonrpc@8.2.0/node_modules/vscode-jsonrpc/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-languageserver@9.0.1?package-id=c967d5d0d10c6bb8",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "vscode-languageserver",
      "version": "9.0.1",
      "description": "Language server implementation for node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-languageserver:vscode-languageserver:9.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-languageserver@9.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/vscode-languageserver-node.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode_languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode-languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode_languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode-languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode_languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_languageserver:9.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-languageserver@9.0.1/node_modules/vscode-languageserver/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-languageserver-protocol@3.17.5?package-id=4b5fb0aca12dacb7",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "vscode-languageserver-protocol",
      "version": "3.17.5",
      "description": "VSCode Language Server Protocol implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-languageserver-protocol:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-languageserver-protocol@3.17.5",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/vscode-languageserver-node.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver-protocol:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_protocol:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_protocol:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-languageserver-protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_languageserver_protocol:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-languageserver-protocol@3.17.5/node_modules/vscode-languageserver-protocol/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-languageserver-textdocument@1.0.12?package-id=a57c0bc962a1b8ca",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "vscode-languageserver-textdocument",
      "version": "1.0.12",
      "description": "A simple text document implementation for Node LSP servers",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-languageserver-textdocument:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-languageserver-textdocument@1.0.12",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/vscode-languageserver-node.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver-textdocument:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_textdocument:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_textdocument:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-languageserver-textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_languageserver_textdocument:1.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-languageserver-textdocument@1.0.12/node_modules/vscode-languageserver-textdocument/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-languageserver-types@3.17.5?package-id=f004f966ab24b105",
      "type": "library",
      "author": "Microsoft Corporation",
      "name": "vscode-languageserver-types",
      "version": "3.17.5",
      "description": "Types used by the Language server for node",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-languageserver-types:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-languageserver-types@3.17.5",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/vscode-languageserver-node.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver-types:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_types:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver_types:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-languageserver:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_languageserver:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Microsoft:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-languageserver-types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_languageserver_types:3.17.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-languageserver-types@3.17.5/node_modules/vscode-languageserver-types/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/vscode-uri@3.0.8?package-id=b75c1b1f77bc6bd8",
      "type": "library",
      "author": "Microsoft",
      "name": "vscode-uri",
      "version": "3.0.8",
      "description": "The URI implementation that is used by VS Code and its extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:vscode-uri:vscode-uri:3.0.8:*:*:*:*:*:*:*",
      "purl": "pkg:npm/vscode-uri@3.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/microsoft/vscode-uri.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/microsoft/vscode-uri#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode-uri:vscode_uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_uri:vscode-uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode_uri:vscode_uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:vscode-uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:vscode_uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode-uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vscode:vscode_uri:3.0.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/vscode-uri@3.0.8/node_modules/vscode-uri/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/walk-up-path@3.0.1?package-id=10e7b7b62d4a4644",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "walk-up-path",
      "version": "3.0.1",
      "description": "Given a path string, return a generator that walks up the path, emitting each dirname.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/walk-up-path@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/walk-up-path",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up-path:walk_up_path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk-up-path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk_up_path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk-up-path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk_up_path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk-up-path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk_up_path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk-up-path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk_up_path:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/walk-up-path@4.0.0?package-id=5078d678fc5f8859",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
      "name": "walk-up-path",
      "version": "4.0.0",
      "description": "Given a path string, return a generator that walks up the path, emitting each dirname.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/walk-up-path@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/walk-up-path",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up-path:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up_path:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk-up:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk_up:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk-up-path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:walk:walk_up_path:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/walk-up-path@4.0.0/node_modules/walk-up-path/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/web-namespaces@2.0.1?package-id=7405a6c953ccb44c",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "web-namespaces",
      "version": "2.0.1",
      "description": "Map of web namespaces",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:web-namespaces:web-namespaces:2.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/web-namespaces@2.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:web-namespaces:web_namespaces:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:web_namespaces:web-namespaces:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:web_namespaces:web_namespaces:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:web:web-namespaces:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:web:web_namespaces:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/web-namespaces@2.0.1/node_modules/web-namespaces/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1?package-id=5520da2ebbd9546a",
      "type": "library",
      "author": "Domenic Denicola <d@domenic.me> (https://domenic.me/)",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "description": "Implements the WebIDL algorithms for converting to and from JavaScript values",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:webidl-conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webidl-conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webidl_conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webidl_conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webidl:webidl-conversions:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:webidl:webidl_conversions:3.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/webidl-conversions@3.0.1/node_modules/webidl-conversions/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/whatwg-encoding@3.1.1?package-id=9815aecc49fd9a16",
      "type": "library",
      "author": "Domenic Denicola <d@domenic.me> (https://domenic.me/)",
      "name": "whatwg-encoding",
      "version": "3.1.1",
      "description": "Decode strings according to the WHATWG Encoding Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:whatwg-encoding:whatwg-encoding:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/whatwg-encoding@3.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg-encoding:whatwg_encoding:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_encoding:whatwg-encoding:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_encoding:whatwg_encoding:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg-encoding:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg_encoding:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/whatwg-encoding@3.1.1/node_modules/whatwg-encoding/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/whatwg-mimetype@4.0.0?package-id=c5b5711cbc864cdc",
      "type": "library",
      "author": "Domenic Denicola <d@domenic.me> (https://domenic.me/)",
      "name": "whatwg-mimetype",
      "version": "4.0.0",
      "description": "Parses, serializes, and manipulates MIME types, according to the WHATWG MIME Sniffing Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:whatwg-mimetype:whatwg-mimetype:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/whatwg-mimetype@4.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg-mimetype:whatwg_mimetype:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_mimetype:whatwg-mimetype:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_mimetype:whatwg_mimetype:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg-mimetype:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg_mimetype:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/whatwg-mimetype@4.0.0/node_modules/whatwg-mimetype/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/whatwg-url@5.0.0?package-id=839987779b751900",
      "type": "library",
      "author": "Sebastian Mayr <github@smayr.name>",
      "name": "whatwg-url",
      "version": "5.0.0",
      "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:whatwg-url:whatwg-url:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/whatwg-url@5.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg-url:whatwg_url:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_url:whatwg-url:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg_url:whatwg_url:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg-url:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:whatwg:whatwg_url:5.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/whatwg-url@5.0.0/node_modules/whatwg-url/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@2.0.2?package-id=1961427e4250ed2f",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@2.0.2?package-id=5b4507f5d004d19a",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/which@2.0.2/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@2.0.2?package-id=687f8a8a6370c67d",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/cross-spawn/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@5.0.0?package-id=5487c731547c9f24",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "which",
      "version": "5.0.0",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/node-gyp/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@5.0.0?package-id=37813fa7bd3d186a",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "which",
      "version": "5.0.0",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/which@5.0.0/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@5.0.0?package-id=fc9f6da695033ef3",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "which",
      "version": "5.0.0",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/which@6.0.1?package-id=8d6a0355f2a71dfe",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "which",
      "version": "6.0.1",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:which:which:6.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/which@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-which.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/which@6.0.1/node_modules/which/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/why-is-node-running@2.3.0?package-id=3b3fff90bc40e7f7",
      "type": "library",
      "author": "Mathias Buus (@mafintosh), Jon Peck <jpeck@fluxsauce.com>",
      "name": "why-is-node-running",
      "version": "2.3.0",
      "description": "Node is running but you don't know why? why-is-node-running is here to help you.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:why-is-node-running:why-is-node-running:2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/why-is-node-running@2.3.0",
      "externalReferences": [
        {
          "url": "https://github.com/mafintosh/why-is-node-running.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mafintosh/why-is-node-running",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why-is-node-running:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is_node_running:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is_node_running:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why-is-node:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why-is-node:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is_node:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is_node:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mafintosh:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why-is:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why-is:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why_is:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why:why-is-node-running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:why:why_is_node_running:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/why-is-node-running@2.3.0/node_modules/why-is-node-running/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wouter@3.7.1?package-id=de787240323b684e",
      "type": "library",
      "author": "Alexey Taktarov <molefrog@gmail.com>",
      "name": "wouter",
      "version": "3.7.1",
      "description": "Minimalist-friendly ~1.5KB router for React",
      "licenses": [
        {
          "license": {
            "id": "Unlicense"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wouter:wouter:3.7.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wouter@3.7.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/molefrog/wouter.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/wouter@3.7.1_patch_hash=4e16e6ff3fde7d6c1024d3e0c8605dc9eb6afb690d0d49958c2f449091813072_react@19.2.1/node_modules/wouter/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=964d567218e705c6",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=ba545564a94c8868",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/wrap-ansi@7.0.0/node_modules/wrap-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=ed2e6b510db6889c",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0?package-id=17d2423cf15896a9",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/wrap-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0?package-id=0f66e064ac777dc0",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/wrap-ansi@8.1.0/node_modules/wrap-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0?package-id=98f9d66d8b599c4f",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/wrap-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrap-ansi@9.0.2?package-id=7c3e8bbf05957a9c",
      "type": "library",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
      "name": "wrap-ansi",
      "version": "9.0.2",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:9.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrap-ansi@9.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap-ansi:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wrap:wrap_ansi:9.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/wrap-ansi@9.0.2/node_modules/wrap-ansi/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=1d3f2b259f956e41",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "url": "https://github.com/npm/wrappy",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/wrappy",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/wrappy@1.0.2/node_modules/wrappy/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/write-file-atomic@6.0.0?package-id=42a7bd80110acd5d",
      "type": "library",
      "author": "GitHub Inc.",
      "name": "write-file-atomic",
      "version": "6.0.0",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:6.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/write-file-atomic@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/write-file-atomic.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/npm/write-file-atomic",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file-atomic:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file_atomic:write-file-atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file_atomic:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file:write-file-atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write-file:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file:write-file-atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write_file:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write:write-file-atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:write:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:write-file-atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npm:write_file_atomic:6.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ws@7.5.13?package-id=60c6f2f9fdaa0b98",
      "type": "library",
      "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
      "name": "ws",
      "version": "7.5.13",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ws_project:ws:7.5.13:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ws@7.5.13",
      "externalReferences": [
        {
          "url": "https://github.com/websockets/ws",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ws@7.5.13_bufferutil@4.1.0_utf-8-validate@6.0.6/node_modules/ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ws@8.21.0?package-id=8ea6b1f35032b027",
      "type": "library",
      "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
      "name": "ws",
      "version": "8.21.0",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ws_project:ws:8.21.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ws@8.21.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/websockets/ws.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/websockets/ws",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ws@8.21.0_bufferutil@4.1.0_utf-8-validate@6.0.6/node_modules/ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/ws@8.21.1?package-id=376c88cb1fd69636",
      "type": "library",
      "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
      "name": "ws",
      "version": "8.21.1",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:ws_project:ws:8.21.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/ws@8.21.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/websockets/ws.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/websockets/ws",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/ws@8.21.1_bufferutil@4.1.0_utf-8-validate@6.0.6/node_modules/ws/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.appthreat/x2cpg_3@2.5.24?package-id=124853736d53031e",
      "type": "library",
      "name": "x2cpg_3",
      "version": "2.5.24",
      "cpe": "cpe:2.3:a:io.appthreat:x2cpg-3:2.5.24:*:*:*:*:*:*:*",
      "purl": "pkg:maven/io.appthreat/x2cpg_3@2.5.24",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bbc46cf4ca0ac9134a6257873ea343b4e0f7866a"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io.appthreat:x2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:x2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:appthreat:x2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg-3:x2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg-3:x2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg_3:x2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg_3:x2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg:x2cpg-3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:x2cpg:x2cpg_3:2.5.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.x2cpg_3-2.5.24.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/io.appthreat.x2cpg_3-2.5.24.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/xml-js@1.6.11?package-id=05bc50e11e0a002d",
      "type": "library",
      "author": "Yousuf Almarzooqi <ysf953@gmail.com>",
      "name": "xml-js",
      "version": "1.6.11",
      "description": "A convertor between XML text and Javascript object / JSON text.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:nashwaan:xml-js:1.6.11:*:*:*:*:*:*:*",
      "purl": "pkg:npm/xml-js@1.6.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/nashwaan/xml-js.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/nashwaan/xml-js#readme",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nashwaan:xml_js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml-js:xml-js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml-js:xml_js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml_js:xml-js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml_js:xml_js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:xml-js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:xml_js:1.6.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/xml-js@1.6.11/node_modules/xml-js/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/xmlbuilder2@4.0.3?package-id=5cf66cab54b06ae4",
      "type": "library",
      "author": "Ozgur Ozcitak <oozcitak@gmail.com>",
      "name": "xmlbuilder2",
      "version": "4.0.3",
      "description": "An XML builder for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:xmlbuilder2:xmlbuilder2:4.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/xmlbuilder2@4.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/oozcitak/xmlbuilder2.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/oozcitak/xmlbuilder2",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oozcitak:xmlbuilder2:4.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/xmlbuilder2@4.0.3/node_modules/xmlbuilder2/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/xmlchars@2.2.0?package-id=5fbf6db5ca5ba191",
      "type": "library",
      "author": "Louis-Dominique Dubeau <ldd@lddubeau.com>",
      "name": "xmlchars",
      "version": "2.2.0",
      "description": "Utilities for determining if characters belong to character classes defined by the XML specs.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:lddubeau:xmlchars:2.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/xmlchars@2.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/lddubeau/xmlchars.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlchars:xmlchars:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/xmlchars@2.2.0/node_modules/xmlchars/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/y18n@5.0.8?package-id=dbca36fe6aba1d2c",
      "type": "library",
      "author": "Ben Coe <bencoe@gmail.com>",
      "name": "y18n",
      "version": "5.0.8",
      "description": "the bare-bones internationalization library used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:y18n_project:y18n:5.0.8:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "url": "https://github.com/yargs/y18n",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/y18n@5.0.8/node_modules/y18n/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@3.1.1?package-id=55f88ed742b61001",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "3.1.1",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yallist@3.1.1/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=864965ffd2cd5781",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-flush/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=13a51af9d2b86864",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-pipeline/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=75644c7351840654",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/minipass-sized/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=e998f87b5b7ee4a2",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yallist@4.0.0/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=92c2f07594e6e2a3",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-flush/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=848fb3196e31ff42",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@4.0.0?package-id=0dec044abe0d9db9",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-sized/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@5.0.0?package-id=77a2a00f67f8aa71",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "5.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/pnpm@10.18.1/node_modules/pnpm/dist/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@5.0.0?package-id=e3b75de69229be56",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "5.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yallist@5.0.0/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yallist@5.0.0?package-id=e06d0388181ef409",
      "type": "library",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "name": "yallist",
      "version": "5.0.0",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yallist@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d84f419161f986391e64d28f3e40dd54381ea37495b0a25daef6353bd8df4d92"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/local/lib/node_modules/npm/node_modules/yallist/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yaml@2.9.0?package-id=9239d378b6cbb4a2",
      "type": "library",
      "author": "Eemeli Aro <eemeli@gmail.com>",
      "name": "yaml",
      "version": "2.9.0",
      "description": "JavaScript parser and stringifier for YAML",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:eemeli:yaml:2.9.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/yaml@2.9.0",
      "externalReferences": [
        {
          "url": "https://eemeli.org/yaml/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yargs@17.7.3?package-id=f7a7ff75baf1b997",
      "type": "library",
      "author": "Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)",
      "name": "yargs",
      "version": "17.7.3",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yargs:yargs:17.7.3:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yargs@17.7.3",
      "externalReferences": [
        {
          "url": "https://github.com/yargs/yargs.git",
          "type": "distribution"
        },
        {
          "url": "https://yargs.js.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yargs@17.7.3/node_modules/yargs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yargs@18.1.0?package-id=c0bf51fcb024bdf8",
      "type": "library",
      "author": "Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)",
      "name": "yargs",
      "version": "18.1.0",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yargs:yargs:18.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yargs@18.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/yargs/yargs.git",
          "type": "distribution"
        },
        {
          "url": "https://yargs.js.org/",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yargs@18.1.0/node_modules/yargs/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yargs-parser@21.1.1?package-id=6166fe4179445360",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "yargs-parser",
      "version": "21.1.1",
      "description": "the mighty option parser used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yargs:yargs-parser:21.1.1:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/yargs-parser@21.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/yargs/yargs-parser.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yargs-parser@21.1.1/node_modules/yargs-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yargs-parser@22.0.0?package-id=ce2939e5a6785a5b",
      "type": "library",
      "author": "Ben Coe <ben@npmjs.com>",
      "name": "yargs-parser",
      "version": "22.0.0",
      "description": "the mighty option parser used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yargs:yargs-parser:22.0.0:*:*:*:*:node.js:*:*",
      "purl": "pkg:npm/yargs-parser@22.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/yargs/yargs-parser.git",
          "type": "distribution"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/yargs-parser@22.0.0/node_modules/yargs-parser/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/yarn@1.22.22?package-id=d1708e025db7b0c0",
      "type": "library",
      "name": "yarn",
      "version": "1.22.22",
      "description": "📦🐈 Fast, reliable, and secure dependency management.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:yarn:yarn:1.22.22:*:*:*:*:*:*:*",
      "purl": "pkg:npm/yarn@1.22.22",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:a45e8410aa35d5194fcdeb7f7969789ac3cc9431d5b69be8602492a2097909d7"
        },
        {
          "name": "syft:location:0:path",
          "value": "/opt/yarn-v1.22.22/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/zip-stream@4.1.1?package-id=e9d8bd3db26bb623",
      "type": "library",
      "author": "Chris Talkington (http://christalkington.com/)",
      "name": "zip-stream",
      "version": "4.1.1",
      "description": "a streaming zip archive generator.",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:archiverjs:zip-stream:4.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:npm/zip-stream@4.1.1",
      "externalReferences": [
        {
          "url": "https://github.com/archiverjs/node-zip-stream.git",
          "type": "distribution"
        },
        {
          "url": "https://github.com/archiverjs/node-zip-stream",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:archiverjs:zip_stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip-stream:zip-stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip-stream:zip_stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip_stream:zip-stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip_stream:zip_stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip:zip-stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip:zip_stream:4.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/zip-stream@4.1.1/node_modules/zip-stream/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/net.lingala.zip4j/zip4j@2.11.6?package-id=756960d4cf098173",
      "type": "library",
      "group": "net.lingala.zip4j",
      "name": "zip4j",
      "version": "2.11.6",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "cpe": "cpe:2.3:a:net.lingala.zip4j:zip4j:2.11.6:*:*:*:*:*:*:*",
      "purl": "pkg:maven/net.lingala.zip4j/zip4j@2.11.6",
      "externalReferences": [
        {
          "url": "",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f0cafa2d85c3e24027544a9938012a4d2e72498f"
            }
          ],
          "type": "build-meta"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lingala:zip4j:2.11.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip4j:zip4j:2.11.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.lingala.zip4j.zip4j-2.11.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zip4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.lingala.zip4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/app/node_modules/.pnpm/@appthreat+atom@2.5.6/node_modules/@appthreat/atom/plugins/lib/net.lingala.zip4j.zip4j-2.11.6.jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib",
      "type": "library",
      "publisher": "Mark Brown <broonie@debian.org>",
      "name": "zlib1g",
      "version": "1:1.2.13.dfsg-1",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.13.dfsg-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&upstream=zlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dpkg-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dpkg-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:accc1090c543b762f38c6e64a939604e31bea122fdad21634e93c530e27ecb02"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/dpkg/status"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/share/doc/zlib1g/copyright"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/dpkg/info/zlib1g:amd64.md5sums"
        },
        {
          "name": "syft:metadata:installedSize",
          "value": "168"
        },
        {
          "name": "syft:metadata:source",
          "value": "zlib"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/zod@4.1.12?package-id=e597d7ab4475d42b",
      "type": "library",
      "author": "Colin McDonnell <zod@colinhacks.com>",
      "name": "zod",
      "version": "4.1.12",
      "description": "TypeScript-first schema declaration and validation library with static type inference",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:zod:zod:4.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:npm/zod@4.1.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/colinhacks/zod.git",
          "type": "distribution"
        },
        {
          "url": "https://zod.dev",
          "type": "website"
        }
      ],
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/zod@4.1.12/node_modules/zod/package.json"
        }
      ]
    },
    {
      "bom-ref": "pkg:npm/zwitch@2.0.4?package-id=025abcb3e0b77d41",
      "type": "library",
      "author": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com), Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)",
      "name": "zwitch",
      "version": "2.0.4",
      "description": "Handle values based on a property",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:zwitch:zwitch:2.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:npm/zwitch@2.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:88fa5d5037194ad3ecd084b1f1422430d9b0dfa910ce796d10d328f7a7dec540"
        },
        {
          "name": "syft:location:0:path",
          "value": "/app/node_modules/.pnpm/zwitch@2.0.4/node_modules/zwitch/package.json"
        }
      ]
    },
    {
      "bom-ref": "os:debian@12.15",
      "type": "operating-system",
      "name": "debian",
      "version": "12.15",
      "description": "Debian GNU/Linux 12 (bookworm)",
      "swid": {
        "tagId": "debian",
        "name": "debian",
        "version": "12.15"
      },
      "externalReferences": [
        {
          "url": "https://bugs.debian.org/",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.debian.org/",
          "type": "website"
        },
        {
          "url": "https://www.debian.org/support",
          "comment": "support",
          "type": "other"
        }
      ],
      "properties": [
        {
          "name": "syft:distro:extendedSupport",
          "value": "false"
        },
        {
          "name": "syft:distro:id",
          "value": "debian"
        },
        {
          "name": "syft:distro:prettyName",
          "value": "Debian GNU/Linux 12 (bookworm)"
        },
        {
          "name": "syft:distro:versionCodename",
          "value": "bookworm"
        },
        {
          "name": "syft:distro:versionID",
          "value": "12.15"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:deb/debian/adduser@3.134?arch=all&distro=debian-12.15&package-id=c02171bf930643dd",
      "dependsOn": [
        "pkg:deb/debian/passwd@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=1853000d374a22b0&upstream=shadow"
      ]
    },
    {
      "ref": "pkg:deb/debian/apt@2.6.1?arch=amd64&distro=debian-12.15&package-id=cd0a6d87e2b9c130",
      "dependsOn": [
        "pkg:deb/debian/adduser@3.134?arch=all&distro=debian-12.15&package-id=c02171bf930643dd",
        "pkg:deb/debian/debian-archive-keyring@2023.3%2Bdeb12u2?arch=all&distro=debian-12.15&package-id=13c7b506427f3aee",
        "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=bab4532a87a829c8&upstream=gnupg2",
        "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64&distro=debian-12.15&package-id=91b1396a4c2e715d&upstream=apt",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12",
        "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=amd64&distro=debian-12.15&package-id=d1631d475c37518a&upstream=gnutls28",
        "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=864deba87ee227ff&upstream=libseccomp",
        "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=c2f4fec51904a8ce&upstream=gcc-12",
        "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd"
      ]
    },
    {
      "ref": "pkg:deb/debian/autossh@1.4g-1%2Bb1?arch=amd64&distro=debian-12.15&package-id=553a99dcf3e6935b&upstream=autossh%401.4g-1",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/openssh-client@1%3A9.2p1-2%2Bdeb12u10?arch=amd64&distro=debian-12.15&package-id=d82af4e74abd89bc&upstream=openssh"
      ]
    },
    {
      "ref": "pkg:deb/debian/base-files@12.4%2Bdeb12u15?arch=amd64&distro=debian-12.15&package-id=735e4e6d8efde23b",
      "dependsOn": [
        "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=amd64&distro=debian-12.15&package-id=81ae31ac445c7dbb"
      ]
    },
    {
      "ref": "pkg:deb/debian/base-passwd@3.6.1?arch=amd64&distro=debian-12.15&package-id=7cc4c7a70852c7fd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libdebconfclient0@0.270?arch=amd64&distro=debian-12.15&package-id=2690aae2bbaa51bf&upstream=cdebconf",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=amd64&distro=debian-12.15&package-id=f910b8efb61f91f7&upstream=bash%405.2.15-2",
      "dependsOn": [
        "pkg:deb/debian/base-files@12.4%2Bdeb12u15?arch=amd64&distro=debian-12.15&package-id=735e4e6d8efde23b",
        "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64&distro=debian-12.15&package-id=2587c3c4d8d21d21",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses"
      ]
    },
    {
      "ref": "pkg:deb/debian/bsdutils@1%3A2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=f131145b816a43ee&upstream=util-linux%402.38.1-5%2Bdeb12u3",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd"
      ]
    },
    {
      "ref": "pkg:deb/debian/coreutils@9.1-1?arch=amd64&distro=debian-12.15&package-id=eca37691b87c0860",
      "dependsOn": [
        "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&package-id=d047530090108251&upstream=acl",
        "pkg:deb/debian/libattr1@1%3A2.5.1-4?arch=amd64&distro=debian-12.15&package-id=722285f8005c2384&upstream=attr",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&package-id=4a42a38761bb84e0&upstream=gmp",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/dash@0.5.12-2?arch=amd64&distro=debian-12.15&package-id=d99eda363265247f",
      "dependsOn": [
        "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64&distro=debian-12.15&package-id=2587c3c4d8d21d21",
        "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64&distro=debian-12.15&package-id=2587c3c4d8d21d21",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/diffutils@1%3A3.8-4?arch=amd64&distro=debian-12.15&package-id=eae3581d3fe173ec",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
      "dependsOn": [
        "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=b7ada9c36eced9fe&upstream=xz-utils",
        "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64&distro=debian-12.15&package-id=f7a02d5b69549304&upstream=libmd",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&package-id=7cc55da81007017d&upstream=libzstd",
        "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=f8ad3f5238dbcf6a",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/e2fsprogs@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=4be417a9253d1325&upstream=e2fsprogs%401.47.0-2",
      "dependsOn": [
        "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2",
        "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=e42f4960873727f9&upstream=e2fsprogs%401.47.0-2",
        "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=1604e864b4a343b7&upstream=e2fsprogs%401.47.0-2",
        "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=2049f4c13963925a&upstream=util-linux",
        "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=db69887a7e4088b2&upstream=e2fsprogs%401.47.0-2"
      ]
    },
    {
      "ref": "pkg:deb/debian/findutils@4.9.0-4?arch=amd64&distro=debian-12.15&package-id=1b6d210249e3ac45",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=bab4532a87a829c8&upstream=gnupg2",
      "dependsOn": [
        "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=df01c68aff59530a",
        "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64&distro=debian-12.15&package-id=bbf12da6801244e7&upstream=libgpg-error",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/grep@3.8-5?arch=amd64&distro=debian-12.15&package-id=22c460e1da8ba8cd",
      "dependsOn": [
        "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12.15&package-id=fdd1d61b217ae9fe&upstream=pcre2"
      ]
    },
    {
      "ref": "pkg:deb/debian/gzip@1.12-1?arch=amd64&distro=debian-12.15&package-id=aa527ab8cb576b14",
      "dependsOn": [
        "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/hostname@3.23%2Bnmu1?arch=amd64&distro=debian-12.15&package-id=6953da8863232503",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/init-system-helpers@1.65.2%2Bdeb12u1?arch=all&distro=debian-12.15&package-id=bc67df4e4ad2e833",
      "dependsOn": [
        "pkg:deb/debian/usr-is-merged@37~deb12u1?arch=all&distro=debian-12.15&package-id=5d5368e5a339ea05&upstream=usrmerge"
      ]
    },
    {
      "ref": "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&package-id=d047530090108251&upstream=acl",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64&distro=debian-12.15&package-id=91b1396a4c2e715d&upstream=apt",
      "dependsOn": [
        "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12",
        "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=df01c68aff59530a",
        "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64&distro=debian-12.15&package-id=7b6901adcac17545&upstream=lz4",
        "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=b7ada9c36eced9fe&upstream=xz-utils",
        "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=c2f4fec51904a8ce&upstream=gcc-12",
        "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd",
        "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=55089f35a6363c37&upstream=systemd",
        "pkg:deb/debian/libxxhash0@0.8.1-1?arch=amd64&distro=debian-12.15&package-id=662454f7c4742a97&upstream=xxhash",
        "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&package-id=7cc55da81007017d&upstream=libzstd",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/libattr1@1%3A2.5.1-4?arch=amd64&distro=debian-12.15&package-id=722285f8005c2384&upstream=attr",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
      "dependsOn": [
        "pkg:deb/debian/libaudit-common@1%3A3.0.9-1?arch=all&distro=debian-12.15&package-id=e35c37c43c21e3d0&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64&distro=debian-12.15&package-id=9a34227939df7216&upstream=libcap-ng%400.8.3-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libbsd0@0.11.7-2?arch=amd64&distro=debian-12.15&package-id=6e136a5b8871310d&upstream=libbsd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64&distro=debian-12.15&package-id=f7a02d5b69549304&upstream=libmd"
      ]
    },
    {
      "ref": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=0d487d9c5e9a860d&upstream=glibc",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
      "dependsOn": [
        "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12"
      ]
    },
    {
      "ref": "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64&distro=debian-12.15&package-id=9a34227939df7216&upstream=libcap-ng%400.8.3-1",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libcap2@1%3A2.66-4%2Bdeb12u3%2Bb1?arch=amd64&distro=debian-12.15&package-id=655ca54e08012b99&upstream=libcap2%401%3A2.66-4%2Bdeb12u3",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libcbor0.8@0.8.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=d8e89a302ab66466&upstream=libcbor%400.8.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=amd64&distro=debian-12.15&package-id=b0cb4641a25bfdd2&upstream=db5.3",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libdebconfclient0@0.270?arch=amd64&distro=debian-12.15&package-id=2690aae2bbaa51bf&upstream=cdebconf",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libedit2@3.1-20221030-2?arch=amd64&distro=debian-12.15&package-id=8f19d012fa950b7b&upstream=libedit",
      "dependsOn": [
        "pkg:deb/debian/libbsd0@0.11.7-2?arch=amd64&distro=debian-12.15&package-id=6e136a5b8871310d&upstream=libbsd",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses"
      ]
    },
    {
      "ref": "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=e42f4960873727f9&upstream=e2fsprogs%401.47.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libffi8@3.4.4-1?arch=amd64&distro=debian-12.15&package-id=3d64cbaa76084dc4&upstream=libffi",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libfido2-1@1.12.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=b647eb71de5e5955&upstream=libfido2%401.12.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcbor0.8@0.8.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=d8e89a302ab66466&upstream=libcbor%400.8.0-2",
        "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=f55823b1f5c2e201&upstream=openssl",
        "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=55089f35a6363c37&upstream=systemd",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12",
      "dependsOn": [
        "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=58c10ea7ffbc22a3&upstream=gcc-12",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=df01c68aff59530a",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64&distro=debian-12.15&package-id=bbf12da6801244e7&upstream=libgpg-error"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&package-id=4a42a38761bb84e0&upstream=gmp",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=amd64&distro=debian-12.15&package-id=d1631d475c37518a&upstream=gnutls28",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&package-id=4a42a38761bb84e0&upstream=gmp",
        "pkg:deb/debian/libhogweed6@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=244c6a089f6b6308&upstream=nettle",
        "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=amd64&distro=debian-12.15&package-id=000ea285a5c77eab&upstream=libidn2%402.3.3-1",
        "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=1ac1c6a69a1bbe8a&upstream=nettle",
        "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=amd64&distro=debian-12.15&package-id=0027543880aaec84&upstream=p11-kit",
        "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9e40126b989ece04",
        "pkg:deb/debian/libunistring2@1.0-2?arch=amd64&distro=debian-12.15&package-id=f167882223735de0&upstream=libunistring"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64&distro=debian-12.15&package-id=bbf12da6801244e7&upstream=libgpg-error",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libgssapi-krb5-2@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=9db16cb04ae3b83d&upstream=krb5",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2",
        "pkg:deb/debian/libk5crypto3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=fb1c9cf5b43a5af0&upstream=krb5",
        "pkg:deb/debian/libkrb5-3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=52548f50c4ff26c7&upstream=krb5",
        "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=309b5ab55a11c7d0&upstream=krb5"
      ]
    },
    {
      "ref": "pkg:deb/debian/libhogweed6@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=244c6a089f6b6308&upstream=nettle",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg1-1.1?arch=amd64&distro=debian-12.15&package-id=4a42a38761bb84e0&upstream=gmp",
        "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=1ac1c6a69a1bbe8a&upstream=nettle"
      ]
    },
    {
      "ref": "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=amd64&distro=debian-12.15&package-id=000ea285a5c77eab&upstream=libidn2%402.3.3-1",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libunistring2@1.0-2?arch=amd64&distro=debian-12.15&package-id=f167882223735de0&upstream=libunistring"
      ]
    },
    {
      "ref": "pkg:deb/debian/libk5crypto3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=fb1c9cf5b43a5af0&upstream=krb5",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=309b5ab55a11c7d0&upstream=krb5"
      ]
    },
    {
      "ref": "pkg:deb/debian/libkeyutils1@1.6.3-2?arch=amd64&distro=debian-12.15&package-id=fbac937687c498c7&upstream=keyutils",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libkrb5-3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=52548f50c4ff26c7&upstream=krb5",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2",
        "pkg:deb/debian/libk5crypto3@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=fb1c9cf5b43a5af0&upstream=krb5",
        "pkg:deb/debian/libkeyutils1@1.6.3-2?arch=amd64&distro=debian-12.15&package-id=fbac937687c498c7&upstream=keyutils",
        "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=309b5ab55a11c7d0&upstream=krb5",
        "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=f55823b1f5c2e201&upstream=openssl"
      ]
    },
    {
      "ref": "pkg:deb/debian/libkrb5support0@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=309b5ab55a11c7d0&upstream=krb5",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64&distro=debian-12.15&package-id=7b6901adcac17545&upstream=lz4",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=b7ada9c36eced9fe&upstream=xz-utils",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64&distro=debian-12.15&package-id=f7a02d5b69549304&upstream=libmd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=3578a81ebb651f3d&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64&distro=debian-12.15&package-id=1ac1c6a69a1bbe8a&upstream=nettle",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=amd64&distro=debian-12.15&package-id=0027543880aaec84&upstream=p11-kit",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libffi8@3.4.4-1?arch=amd64&distro=debian-12.15&package-id=3d64cbaa76084dc4&upstream=libffi"
      ]
    },
    {
      "ref": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=372dffabd059479c&upstream=pam",
      "dependsOn": [
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
        "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=4cab7ef7de016d31&upstream=pam",
      "dependsOn": [
        "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15&package-id=242708e27fd24140",
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
        "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=amd64&distro=debian-12.15&package-id=b0cb4641a25bfdd2&upstream=db5.3",
        "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=372dffabd059479c&upstream=pam",
        "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all&distro=debian-12.15&package-id=ca1034d5d24bcf54&upstream=pam",
      "dependsOn": [
        "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15&package-id=242708e27fd24140",
        "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=4cab7ef7de016d31&upstream=pam"
      ]
    },
    {
      "ref": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
      "dependsOn": [
        "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15&package-id=242708e27fd24140",
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12.15&package-id=fdd1d61b217ae9fe&upstream=pcre2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=864deba87ee227ff&upstream=libseccomp",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12.15&package-id=fdd1d61b217ae9fe&upstream=pcre2"
      ]
    },
    {
      "ref": "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=amd64&distro=debian-12.15&package-id=3e495c97375273f7&upstream=libsemanage%403.4-1",
      "dependsOn": [
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64&distro=debian-12.15&package-id=751ec9ae4280dd32&upstream=bzip2%401.0.8-5",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libsemanage-common@3.4-1?arch=all&distro=debian-12.15&package-id=4a9257795fc45897&upstream=libsemanage",
        "pkg:deb/debian/libsepol2@3.4-2.1?arch=amd64&distro=debian-12.15&package-id=ef742c3346e74452&upstream=libsepol"
      ]
    },
    {
      "ref": "pkg:deb/debian/libsepol2@3.4-2.1?arch=amd64&distro=debian-12.15&package-id=ef742c3346e74452&upstream=libsepol",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=ecee94562f1ce06f&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=1604e864b4a343b7&upstream=e2fsprogs%401.47.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=d35ef33fd323c933&upstream=e2fsprogs%401.47.0-2"
      ]
    },
    {
      "ref": "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=f55823b1f5c2e201&upstream=openssl",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=c2f4fec51904a8ce&upstream=gcc-12",
      "dependsOn": [
        "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=58c10ea7ffbc22a3&upstream=gcc-12",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9454a77b5ea4561d&upstream=gcc-12"
      ]
    },
    {
      "ref": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcap2@1%3A2.66-4%2Bdeb12u3%2Bb1?arch=amd64&distro=debian-12.15&package-id=655ca54e08012b99&upstream=libcap2%401%3A2.66-4%2Bdeb12u3",
        "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=df01c68aff59530a",
        "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64&distro=debian-12.15&package-id=7b6901adcac17545&upstream=lz4",
        "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=b7ada9c36eced9fe&upstream=xz-utils",
        "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&package-id=7cc55da81007017d&upstream=libzstd"
      ]
    },
    {
      "ref": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=9e40126b989ece04",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=55089f35a6363c37&upstream=systemd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libunistring2@1.0-2?arch=amd64&distro=debian-12.15&package-id=f167882223735de0&upstream=libunistring",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=2049f4c13963925a&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libxxhash0@0.8.1-1?arch=amd64&distro=debian-12.15&package-id=662454f7c4742a97&upstream=xxhash",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64&distro=debian-12.15&package-id=7cc55da81007017d&upstream=libzstd",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/login@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=d5e0daed57b0ef5c&upstream=shadow",
      "dependsOn": [
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
        "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=4cab7ef7de016d31&upstream=pam",
        "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all&distro=debian-12.15&package-id=ca1034d5d24bcf54&upstream=pam",
        "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam"
      ]
    },
    {
      "ref": "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=amd64&distro=debian-12.15&package-id=db69887a7e4088b2&upstream=e2fsprogs%401.47.0-2",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=amd64&distro=debian-12.15&package-id=81ae31ac445c7dbb",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=e75e0a2b6968d414&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=3578a81ebb651f3d&upstream=util-linux",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=ecee94562f1ce06f&upstream=util-linux"
      ]
    },
    {
      "ref": "pkg:deb/debian/ncurses-bin@6.4-4?arch=amd64&distro=debian-12.15&package-id=c5b18ac268f2ccdf&upstream=ncurses",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses"
      ]
    },
    {
      "ref": "pkg:deb/debian/openssh-client@1%3A9.2p1-2%2Bdeb12u10?arch=amd64&distro=debian-12.15&package-id=d82af4e74abd89bc&upstream=openssh",
      "dependsOn": [
        "pkg:deb/debian/adduser@3.134?arch=all&distro=debian-12.15&package-id=c02171bf930643dd",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libedit2@3.1-20221030-2?arch=amd64&distro=debian-12.15&package-id=8f19d012fa950b7b&upstream=libedit",
        "pkg:deb/debian/libfido2-1@1.12.0-2%2Bb1?arch=amd64&distro=debian-12.15&package-id=b647eb71de5e5955&upstream=libfido2%401.12.0-2",
        "pkg:deb/debian/libgssapi-krb5-2@1.20.1-2%2Bdeb12u5?arch=amd64&distro=debian-12.15&package-id=9db16cb04ae3b83d&upstream=krb5",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libssl3@3.0.20-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=f55823b1f5c2e201&upstream=openssl",
        "pkg:deb/debian/passwd@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=1853000d374a22b0&upstream=shadow",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/passwd@1%3A4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=1853000d374a22b0&upstream=shadow",
      "dependsOn": [
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
        "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=4cab7ef7de016d31&upstream=pam",
        "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=amd64&distro=debian-12.15&package-id=3e495c97375273f7&upstream=libsemanage%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=e272b8e8d5eb9292&upstream=perl",
      "dependsOn": [
        "pkg:deb/debian/dpkg@1.21.23?arch=amd64&distro=debian-12.15&package-id=73ddb57553ac7816",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt"
      ]
    },
    {
      "ref": "pkg:deb/debian/sed@4.9-1%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=25af63bae673e973",
      "dependsOn": [
        "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&package-id=d047530090108251&upstream=acl",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=amd64&distro=debian-12.15&package-id=ad6415822991d492&upstream=sysvinit",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=amd64&distro=debian-12.15&package-id=f8ad3f5238dbcf6a",
      "dependsOn": [
        "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64&distro=debian-12.15&package-id=d047530090108251&upstream=acl",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1"
      ]
    },
    {
      "ref": "pkg:deb/debian/tzdata@2026b-0%2Bdeb12u1?arch=all&distro=debian-12.15&package-id=d46071bbd0f9a5a0",
      "dependsOn": [
        "pkg:deb/debian/debconf@1.5.82?arch=all&distro=debian-12.15&package-id=242708e27fd24140"
      ]
    },
    {
      "ref": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=fc9180bcad1f4d49&upstream=util-linux",
      "dependsOn": [
        "pkg:deb/debian/libaudit1@1%3A3.0.9-1?arch=amd64&distro=debian-12.15&package-id=366c21d0062ecd94&upstream=audit",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=ecee94562f1ce06f&upstream=util-linux"
      ]
    },
    {
      "ref": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=b11f4a313957922c",
      "dependsOn": [
        "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=af35543f081d70bf&upstream=util-linux",
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc",
        "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64&distro=debian-12.15&package-id=9a34227939df7216&upstream=libcap-ng%400.8.3-1",
        "pkg:deb/debian/libcrypt1@1%3A4.4.33-2?arch=amd64&distro=debian-12.15&package-id=66f0c5120721190f&upstream=libxcrypt",
        "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=3578a81ebb651f3d&upstream=util-linux",
        "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64&distro=debian-12.15&package-id=87d8465053cf56c8&upstream=pam",
        "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64&distro=debian-12.15&package-id=b898b3b52ac4e1df&upstream=libselinux%403.4-1",
        "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=ecee94562f1ce06f&upstream=util-linux",
        "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=fa8be228d5b7724c&upstream=systemd",
        "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64&distro=debian-12.15&package-id=a6231fb14cfeaaac&upstream=ncurses",
        "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64&distro=debian-12.15&package-id=55089f35a6363c37&upstream=systemd",
        "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=2049f4c13963925a&upstream=util-linux",
        "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12.15&package-id=fc9180bcad1f4d49&upstream=util-linux",
        "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib"
      ]
    },
    {
      "ref": "pkg:deb/debian/zlib1g@1%3A1.2.13.dfsg-1?arch=amd64&distro=debian-12.15&package-id=077923f667034501&upstream=zlib",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64&distro=debian-12.15&package-id=3d449c1cd40f62d0&upstream=glibc"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343?package-id=2e6ff937052ac49d",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.30.0?package-id=cdcc0647524ed355",
        "pkg:golang/golang.org/x/sync@v0.18.0?package-id=af09cf05d26a5987",
        "pkg:golang/golang.org/x/tools@v0.39.0?package-id=7134e8081df82d5b",
        "pkg:golang/stdlib@1.25.11?package-id=b39e270fe418e9b7"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem@v0.0.0-20260613212014-4edd3409b343?package-id=739945d3a29994f9",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.30.0?package-id=d41717a8153bdd2a",
        "pkg:golang/golang.org/x/sync@v0.18.0?package-id=542606649fe64512",
        "pkg:golang/golang.org/x/tools@v0.39.0?package-id=f7f02cee570ce81a",
        "pkg:golang/stdlib@1.25.11?package-id=b976663607ee2058"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343?package-id=04fc77c0ab6b7e9c",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.39.0?package-id=7487b2dfcd4d453e",
        "pkg:golang/stdlib@1.25.11?package-id=f298c90698d4e843"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/trustinspector@v0.0.0-20260613212014-4edd3409b343?package-id=0da16ec8e84728db",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.39.0?package-id=e68ae952a5abfaf8",
        "pkg:golang/stdlib@1.25.11?package-id=4d1e98ab5722d05e"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cdxgen/safer-exec/go@v0.0.0-20260615211941-1d8adbd49f0c?package-id=b062f603d261e983",
      "dependsOn": [
        "pkg:golang/github.com/cilium/ebpf@v0.17.3?package-id=8631b3ab807a2660",
        "pkg:golang/golang.org/x/net@v0.55.0?package-id=09443de55468353e",
        "pkg:golang/golang.org/x/sys@v0.45.0?package-id=a4ef549d38aab6e9",
        "pkg:golang/stdlib@1.26.4?package-id=c6f02a59a7891473"
      ]
    },
    {
      "ref": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20240609211631-fc37c2fa9de2?package-id=647d908ef9b99d4f",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8?package-id=d1dcf4ac3f470c06",
        "pkg:golang/stdlib@1.20.12?package-id=50d23620c5b78793"
      ]
    },
    {
      "ref": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20250917161616-d6b668f96fb0?package-id=559e63d2047d087f",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8?package-id=0bd3d4ebfab22291",
        "pkg:golang/stdlib@1.23.12?package-id=1dde85ab4c0389f7"
      ]
    },
    {
      "ref": "pkg:golang/trivy-cdxgen?package-id=b5b05282f30f519d",
      "dependsOn": [
        "pkg:golang/cel.dev/expr@v0.24.0?package-id=b2b406543bfe4d48",
        "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=cb06e0d8c94a6b17",
        "pkg:golang/cloud.google.com/go/auth@v0.17.0?package-id=9b699a2a1249de39",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=7994d30a9f93296e",
        "pkg:golang/cloud.google.com/go/iam@v1.5.3?package-id=54aedc2ec6ae8ee3",
        "pkg:golang/cloud.google.com/go/monitoring@v1.24.2?package-id=e26b94ae7b32fa3a",
        "pkg:golang/cloud.google.com/go/storage@v1.56.0?package-id=e90f39fb3a641a18",
        "pkg:golang/cloud.google.com/go@v0.121.6?package-id=a70214b0b9580ff3",
        "pkg:golang/dario.cat/mergo@v1.0.2?package-id=16ba26e2904bfac3",
        "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=007674815f5a2472",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=85cfeb8f3b2bd1e2",
        "pkg:golang/github.com/alecthomas/chroma@v0.10.0?package-id=199a89b2ea71d41a",
        "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092?package-id=36bcd063eeb1e7a9",
        "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0?package-id=ebdb10be8ec3d0f9",
        "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0?package-id=271623c120dad9d1",
        "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce?package-id=17898244faf0e19b",
        "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2?package-id=3c0c829e3f59ad0d",
        "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1?package-id=db5410775d03e929",
        "pkg:golang/github.com/aquasecurity/go-version@v0.0.1?package-id=2a25268585d11a17",
        "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10?package-id=5a296f2bc349eac5",
        "pkg:golang/github.com/aquasecurity/jfather@v0.0.8?package-id=f9070cb41a8b496e",
        "pkg:golang/github.com/aquasecurity/table@v1.11.0?package-id=e00af4e4da3c9d6c",
        "pkg:golang/github.com/aquasecurity/tml@v0.6.1?package-id=fb9249b015d6b028",
        "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169?package-id=f223cfdeb932c159",
        "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a?package-id=ba618a8fbd1828af",
        "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48?package-id=233a8b4f6a502f8a",
        "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1?package-id=4ca4655dd847622c",
        "pkg:golang/github.com/aquasecurity/trivy@v0.68.2?package-id=15a7bd7efeab552a",
        "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=7548af3b9a538211",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3?package-id=302966cb5ea4c259",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0?package-id=13ce0cbf7be27b52",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0?package-id=34b900428329015c",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14?package-id=0daf3abf99853ead",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14?package-id=55b2d05dd811976c",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14?package-id=2e1ee930d6e7a9fc",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4?package-id=ea72496dd1a4b14e",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14?package-id=70779a5ec055fcca",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1?package-id=37a102b5b05d7c12",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0?package-id=74a273f6195fdca6",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1?package-id=de8efe262c91ffc5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3?package-id=42d1f06931272848",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5?package-id=2615f276adcc4729",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14?package-id=0d703357407521a6",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14?package-id=739d695ef9cf1e64",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0?package-id=0cebf943a595535e",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1?package-id=6d32e0d25a95eab2",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4?package-id=0794f517da6da7b1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8?package-id=84dddd53ae5f6902",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1?package-id=afe4b3a562769e63",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0?package-id=3c383d04eeaf2dcd",
        "pkg:golang/github.com/aws/smithy-go@v1.23.2?package-id=eb0c044b0632ccc7",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.20.0?package-id=acd4516e0796db91",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1?package-id=1019b66c396c7c8a",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3?package-id=fc54fb2628305360",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.11.2?package-id=6539a217ca22caaa",
        "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.6.0?package-id=6535f36298603cb4",
        "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=646c94003d342aeb",
        "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d?package-id=a7ccfca8a1741ee1",
        "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c?package-id=957c52fc3f2c0723",
        "pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=687941d526ac598c",
        "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=70894792ad4fcd16",
        "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1?package-id=4c116ab9a1f2d2a9",
        "pkg:golang/github.com/briandowns/spinner@v1.23.0?package-id=d51a23d23f8bb270",
        "pkg:golang/github.com/burntsushi/toml@v1.5.0?package-id=bbf11af48d583cb2",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=eccc4f498e8e0ffb",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=114ece1955766bcd",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=a0b61162bba83a61",
        "pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=1bbf71669b36fa0d",
        "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=0c684a680efaa5e3",
        "pkg:golang/github.com/cloudflare/circl@v1.6.1?package-id=be0d44d50fcba766",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443?package-id=6b2e0dbe750d7da4",
        "pkg:golang/github.com/containerd/containerd/api@v1.10.0?package-id=92af84f93c3cdc35",
        "pkg:golang/github.com/containerd/containerd/v2@v2.2.0?package-id=5099f1f78427a2fa",
        "pkg:golang/github.com/containerd/containerd@v1.7.29?package-id=3087294a027a4b9e",
        "pkg:golang/github.com/containerd/continuity@v0.4.5?package-id=124fecb2bc24f168",
        "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=3d5235bac8acc158",
        "pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=25e5490a9352c6af",
        "pkg:golang/github.com/containerd/fifo@v1.1.0?package-id=b989b61d78ba7d0e",
        "pkg:golang/github.com/containerd/log@v0.1.0?package-id=2e3f4008aa6817d5",
        "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2?package-id=afb539281f0c99ce",
        "pkg:golang/github.com/containerd/plugin@v1.0.0?package-id=578d8d080552c59a",
        "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0?package-id=fa5a254d6a200a1e",
        "pkg:golang/github.com/containerd/ttrpc@v1.2.7?package-id=5b5be5bd3eb0b18c",
        "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3?package-id=8222a0b6aff65b2f",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46?package-id=5d7164f431ac0599",
        "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.9.3?package-id=8b28d162c9e543d2",
        "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0?package-id=db5d641c76a30397",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=ee8299b7af36c0e0",
        "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f?package-id=b985f6135e35abe0",
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=fc1a73b966b46910",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=1f9d466756f46f5f",
        "pkg:golang/github.com/distribution/reference@v0.6.0?package-id=18206a13071537e1",
        "pkg:golang/github.com/dlclark/regexp2@v1.11.0?package-id=e4353587279ee396",
        "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible?package-id=67fba7e7b4ed6b46",
        "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible?package-id=658a1c525a9eaf60",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3?package-id=f80465e061325d3f",
        "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible?package-id=0772978927b4d0fe",
        "pkg:golang/github.com/docker/go-connections@v0.6.0?package-id=d70695abd4714be1",
        "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=079858e3061089bb",
        "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707?package-id=d8b1a8e54b732c66",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=80104dbef1d51558",
        "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=64e95d6ebee447cd",
        "pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=628a68cb0c2bffec",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4?package-id=0a8e832994ae9d94",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1?package-id=6638c56415e94a40",
        "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible?package-id=0f9b8ec1e6958a6f",
        "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f?package-id=5d224783b6bfb368",
        "pkg:golang/github.com/fatih/color@v1.18.0?package-id=b472477c0c89157c",
        "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=5f4c504edb794f96",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=92ed03d9c2050f9f",
        "pkg:golang/github.com/fvbommel/sortorder@v1.1.0?package-id=008228121b8968bf",
        "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=f8e21fd26bbf9f64",
        "pkg:golang/github.com/go-chi/chi/v5@v5.2.3?package-id=0cbe9775bb899422",
        "pkg:golang/github.com/go-errors/errors@v1.4.2?package-id=3da5deebf43f8346",
        "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=a3e33c0873fe296f",
        "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2?package-id=de79db3bb1f2e29e",
        "pkg:golang/github.com/go-git/go-git/v5@v5.16.3?package-id=730c0d6a1619b6e3",
        "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0?package-id=89493d9de2bab3ce",
        "pkg:golang/github.com/go-ini/ini@v1.67.0?package-id=6d4610ca451f8387",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2?package-id=b232a2120949ffa1",
        "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=429800fa1f99f53b",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=6183b42176db0505",
        "pkg:golang/github.com/go-openapi/analysis@v0.24.1?package-id=03e03bb204607ed5",
        "pkg:golang/github.com/go-openapi/errors@v0.22.4?package-id=f7baaa4dcb7b1fe1",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1?package-id=b393038dd0da70e2",
        "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3?package-id=eea257b8f11fabfc",
        "pkg:golang/github.com/go-openapi/loads@v0.23.2?package-id=6303e6e1a54cb842",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.2?package-id=9f0dcad9e53f7e96",
        "pkg:golang/github.com/go-openapi/spec@v0.22.1?package-id=789f0275c51e90b0",
        "pkg:golang/github.com/go-openapi/strfmt@v0.25.0?package-id=c0a338d40a415173",
        "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1?package-id=3292997d52370ee6",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1?package-id=457ea72c8e6eb1b4",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1?package-id=b7d9b0d6314e3392",
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1?package-id=fad076c0382f6f23",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1?package-id=89a8892214ffaa24",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1?package-id=e1a00a9af5d4a529",
        "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1?package-id=0db60677ab62dc7d",
        "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1?package-id=1bda512ce1e5eaca",
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1?package-id=7ff16c602b731393",
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1?package-id=ac8d1141df09be69",
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1?package-id=b5c33c8e71105d4c",
        "pkg:golang/github.com/go-openapi/swag@v0.25.1?package-id=ea13ff73d1182a96",
        "pkg:golang/github.com/go-openapi/validate@v0.25.1?package-id=504c04e8f3e89731",
        "pkg:golang/github.com/go-redis/redis/v8@v8.11.5?package-id=62cd189b22a2d6fe",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0?package-id=39f79696e02dace5",
        "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=379f53862e7d7a07",
        "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0?package-id=ce148b512e677282",
        "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=881f7dda5580e227",
        "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0?package-id=74f382773c9c68c4",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=8e57ac098b057afc",
        "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=3b2b90510a4de616",
        "pkg:golang/github.com/google/btree@v1.1.3?package-id=8f4d0057f2b7c367",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8?package-id=0b62600d9e27ba64",
        "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=836a1806d4514ff2",
        "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=3c0d7b2b6d8860e8",
        "pkg:golang/github.com/google/go-containerregistry@v0.20.6?package-id=4ad87019a580ad8c",
        "pkg:golang/github.com/google/go-github/v62@v62.0.0?package-id=f15cb51f53ec5786",
        "pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=dbd27a6e04688084",
        "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0?package-id=21ae1889034a5cd2",
        "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=8fb2ac26ac0933f2",
        "pkg:golang/github.com/google/uuid@v1.6.0?package-id=9d707a7cc2d6491b",
        "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6?package-id=25f194f555fb1f66",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0?package-id=f21a74d4bd193355",
        "pkg:golang/github.com/googlecloudplatform/docker-credential-gcr/v2@v2.1.30?package-id=5e5b62b0b7aac41b",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.29.0?package-id=08e2e32e7eeda6a1",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.53.0?package-id=5af3f0a91e7e4eaf",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0?package-id=9e2df8b8cbfbcd0e",
        "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674?package-id=eecd4315e5e4485e",
        "pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=92dcc33a075a30cc",
        "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79?package-id=6d14cf2a75f9eddc",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2?package-id=7f0f95a6f3f49b1f",
        "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65?package-id=9aa325ed17c2343f",
        "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=068457ac51524d4a",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=00f46993ff558d66",
        "pkg:golang/github.com/hashicorp/go-getter@v1.8.3?package-id=12437f65c5fffa23",
        "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=bc51fe5aa47e1320",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=c2d5898c96f85b46",
        "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3?package-id=385500d714e92ec8",
        "pkg:golang/github.com/hashicorp/go-version@v1.7.0?package-id=f14006afdee30652",
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=4e81bc4749728eff",
        "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0?package-id=a8aaf0ef7fa21b8e",
        "pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=bff9c21c1b74c39b",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0?package-id=bd93b77abd95c74d",
        "pkg:golang/github.com/intevation/gval@v1.3.0?package-id=8fef081b5857bede",
        "pkg:golang/github.com/intevation/jsonpath@v0.2.1?package-id=68f46ab27e778379",
        "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=6a49a7a93a95cab8",
        "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=3ef3fd0b6b459b31",
        "pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=792904a7d3441665",
        "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=50999fe733e4d1ea",
        "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0?package-id=0f4c88384acff7c0",
        "pkg:golang/github.com/klauspost/compress@v1.18.1?package-id=4c37329475476c0f",
        "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f?package-id=7ac9d5afec4659d1",
        "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23?package-id=5013943c8ddf4b30",
        "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075?package-id=5b15a2cd48763772",
        "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1?package-id=11445ee818ffdd58",
        "pkg:golang/github.com/knqyf263/nested@v0.0.1?package-id=8f74ccf445055e4f",
        "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=c20b64f5b6dd04b7",
        "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=edc9eaeaba721f20",
        "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=42397f728b6ace56",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=06e72cfb4366117e",
        "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0?package-id=1b3ec217160ad272",
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=a87d6f5995e522e9",
        "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1?package-id=e19f114d4b4a28d5",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11?package-id=ad00778c3141c42e",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=d6110f867782c124",
        "pkg:golang/github.com/lestrrat-go/option@v1.0.1?package-id=75de1aa48d338707",
        "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec?package-id=472dbf1050ae01c5",
        "pkg:golang/github.com/lib/pq@v1.10.9?package-id=c777a8fa397c2ab4",
        "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=8f3cf0b7ca1d9c44",
        "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40?package-id=22b31ad51bfc74e0",
        "pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=32e0285da37a56b0",
        "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee?package-id=899f8e283dc6062d",
        "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e?package-id=b838fd099bef9cb3",
        "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd?package-id=711ea783aecca1c1",
        "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a?package-id=c1892a785b57a040",
        "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd?package-id=dce6a0bd41eeb4ed",
        "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44?package-id=267525a486728162",
        "pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=cfea1a7a7144783e",
        "pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=ea40811a75f0c0ef",
        "pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=189410522960049d",
        "pkg:golang/github.com/masterminds/squirrel@v1.5.4?package-id=671ef14e1ee64d85",
        "pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=7b6a4bdba7996684",
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=149cae8a7177284a",
        "pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=9438b844f199ffce",
        "pkg:golang/github.com/mattn/go-shellwords@v1.0.12?package-id=e47aa82f88a841b7",
        "pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=3e01939d594978cf",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=1ec59c4d46414eca",
        "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=4bbea5853c259db8",
        "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2?package-id=a22bd29b86a98086",
        "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=8ea15831f22a7272",
        "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=691083ac9a02e1e6",
        "pkg:golang/github.com/moby/buildkit@v0.26.2?package-id=81773755dbe2d5d7",
        "pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=6ae8c844982b197c",
        "pkg:golang/github.com/moby/locker@v1.0.1?package-id=b0298f1745a3f85f",
        "pkg:golang/github.com/moby/moby/api@v1.52.0?package-id=7935bc8c5d001708",
        "pkg:golang/github.com/moby/moby/client@v0.1.0?package-id=3fbaef78c0551b2c",
        "pkg:golang/github.com/moby/spdystream@v0.5.0?package-id=e2e21e22fa264041",
        "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0?package-id=afdd822f8946c16e",
        "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2?package-id=f250fa6f2dff6745",
        "pkg:golang/github.com/moby/sys/sequential@v0.6.0?package-id=a0020a5a224b85d7",
        "pkg:golang/github.com/moby/sys/signal@v0.7.1?package-id=96a656f16004c3da",
        "pkg:golang/github.com/moby/sys/user@v0.4.0?package-id=94250e886b5acf57",
        "pkg:golang/github.com/moby/sys/userns@v0.1.0?package-id=10cfdea95b7181fc",
        "pkg:golang/github.com/moby/term@v0.5.2?package-id=8c5931133c868734",
        "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=82f6880d5991409a",
        "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=5a7120d8587a736d",
        "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=ab2bd20ba094da55",
        "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=9596fef7ea46cd76",
        "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=4ee4676fb737d169",
        "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f?package-id=d4f10490bc1253e0",
        "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=9e51474d00fdb8c4",
        "pkg:golang/github.com/nytimes/gziphandler@v1.1.1?package-id=31cd27099a45b74a",
        "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=1b233a406d19956a",
        "pkg:golang/github.com/oklog/ulid@v1.3.1?package-id=acbe15e15ea76b81",
        "pkg:golang/github.com/open-policy-agent/opa@v1.10.1?package-id=eabab9458884dccd",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=deaa535f407f32f7",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=6e92f3d2f32de6d2",
        "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1?package-id=79228f6b799cb530",
        "pkg:golang/github.com/opencontainers/selinux@v1.13.0?package-id=8069805f90b012a8",
        "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553?package-id=e025a4459c83e4f6",
        "pkg:golang/github.com/openvex/go-vex@v0.2.7?package-id=7bb2219a7d25545a",
        "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3?package-id=4a0430f41dcecc09",
        "pkg:golang/github.com/owenrumney/squealer@v1.2.11?package-id=e6f7f0d55c246fba",
        "pkg:golang/github.com/package-url/packageurl-go@v0.1.3?package-id=e7406c1b10721ffd",
        "pkg:golang/github.com/pandatix/go-cvss@v0.6.2?package-id=1fd4f055db413fc7",
        "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=84b38c73b413f7bf",
        "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible?package-id=09224c104935bff7",
        "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2?package-id=81e28ed131edcc56",
        "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=32ed9882dc6e9e92",
        "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=41e59934afabc5d7",
        "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=b2a7aa4701629e02",
        "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=0e954f3c86af6274",
        "pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=489f3c970e674eca",
        "pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=596edd0616ed8034",
        "pkg:golang/github.com/prometheus/common@v0.66.1?package-id=5aa841ab329dd028",
        "pkg:golang/github.com/prometheus/procfs@v0.17.0?package-id=400ebeed261fc28a",
        "pkg:golang/github.com/protonmail/go-crypto@v1.3.0?package-id=c1d9e15ad3f75a95",
        "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=1c7daec9aac00a96",
        "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=c3444268211fcf0e",
        "pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=5b2bae22b34739d4",
        "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0?package-id=3da8432b6279ec11",
        "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=03f51520c1ce0a6b",
        "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=efa8967056e39b46",
        "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=413e25c14d745da7",
        "pkg:golang/github.com/samber/lo@v1.52.0?package-id=696a3eb6fd6695a5",
        "pkg:golang/github.com/samber/oops@v1.18.1?package-id=10383dedefdbb86f",
        "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=a0cd0b51462c6bb9",
        "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0?package-id=bbdeb9fe25a39b31",
        "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=6d221468ff3bebb9",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1?package-id=bb5f6cb6741990cb",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=f2d809b3f5e8fb3f",
        "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=a58fa78983316737",
        "pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=aa4d6d97eb73bf1a",
        "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4?package-id=d867b4637365045c",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0?package-id=8bbe43df0750d88f",
        "pkg:golang/github.com/sigstore/rekor@v1.4.3?package-id=30dc94cbe3e64958",
        "pkg:golang/github.com/sigstore/sigstore@v1.9.5?package-id=22a660030be4f52d",
        "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2?package-id=5b47a7eced56be88",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af?package-id=8748f8640dce549c",
        "pkg:golang/github.com/skeema/knownhosts@v1.3.1?package-id=9302257658670afc",
        "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=4af71e564836518c",
        "pkg:golang/github.com/spdx/tools-golang@v0.5.5?package-id=6761738d37116d3e",
        "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=cac76a8283eb73f8",
        "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=309b745c58d0ed91",
        "pkg:golang/github.com/spf13/cobra@v1.10.1?package-id=925de16474cba068",
        "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=06ed44e231081468",
        "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=a5f1475ebf842c33",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0?package-id=6633cc2b86830f19",
        "pkg:golang/github.com/stretchr/objx@v0.5.2?package-id=411a9f05b5b4d4b1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1?package-id=6654e7a92f92e525",
        "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=b8bb0bc6e2053d5d",
        "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=b6a1d4c851186569",
        "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=398f50e3b6eaa1cd",
        "pkg:golang/github.com/tetratelabs/wazero@v1.10.1?package-id=1190c152aa48cc22",
        "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=ed7c4593333acf34",
        "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=2fdeffef0c60f2df",
        "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=8668a1d990e3d5fe",
        "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0?package-id=28d6daae8144a78f",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=ee4b18326f00cc6b",
        "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible?package-id=807cf8df68328c84",
        "pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=f8bee5562c71fd5b",
        "pkg:golang/github.com/valyala/fastjson@v1.6.4?package-id=2dbc51041b4c30a8",
        "pkg:golang/github.com/vbatts/tar-split@v0.12.2?package-id=9a83f2d2dcd62db5",
        "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30?package-id=5f977fd0593602af",
        "pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=861d50ed55ebc767",
        "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1?package-id=d94203b573d714f7",
        "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0?package-id=5eac30b073dec4a9",
        "pkg:golang/github.com/x448/float16@v0.8.4?package-id=d8ecfa6a5be7f0e9",
        "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=0f40c79f67c5170d",
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=2faa75ec3badabf9",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=64ad779ca6e76068",
        "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=620f00e6fe4daa07",
        "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8?package-id=0dc3fae860cc8b58",
        "pkg:golang/github.com/xlab/treeprint@v1.2.0?package-id=d83b0de000d75acb",
        "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=3bbabe73367649a5",
        "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0?package-id=e475a67a8b271542",
        "pkg:golang/github.com/zclconf/go-cty@v1.17.0?package-id=0b63a51a895785ef",
        "pkg:golang/github.com/zeebo/errs@v1.4.0?package-id=95a81b56b9b524b2",
        "pkg:golang/go.etcd.io/bbolt@v1.4.3?package-id=06a19f2615fb18b6",
        "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6?package-id=126dc8699c66ff0b",
        "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=3dfcabd308411e03",
        "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0?package-id=68fbd03ac0d2fb9b",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0?package-id=a5299d2d1c4ae75e",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0?package-id=15f686cb4b53bbfe",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0?package-id=417291b28df46cee",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0?package-id=3bd6649b21fef965",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0?package-id=4f125edcae3e76a4",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0?package-id=5aaf9b02bc1abcc8",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0?package-id=3357a50df11f5190",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0?package-id=1496ca861a41025c",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0?package-id=83f6bd5f249ff88f",
        "pkg:golang/go.opentelemetry.io/otel@v1.38.0?package-id=012f43ed551a050b",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1?package-id=8ee10da2dfb36ed8",
        "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=97ca470b5500fb0c",
        "pkg:golang/go.uber.org/zap@v1.27.0?package-id=e2378efd29a380f9",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.2?package-id=8ad13e03e23ad6cb",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=762ac741b0426add",
        "pkg:golang/golang.org/x/crypto@v0.45.0?package-id=9a1e58ef6a0392ba",
        "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546?package-id=65cad8ee58a28966",
        "pkg:golang/golang.org/x/mod@v0.30.0?package-id=f46c7c7816ae8e56",
        "pkg:golang/golang.org/x/net@v0.47.0?package-id=536772ae8c7ca2a4",
        "pkg:golang/golang.org/x/oauth2@v0.32.0?package-id=e637d7e77b12a348",
        "pkg:golang/golang.org/x/sync@v0.18.0?package-id=2a3dc3c0b890ebb6",
        "pkg:golang/golang.org/x/sys@v0.38.0?package-id=26741d8694b28e77",
        "pkg:golang/golang.org/x/term@v0.37.0?package-id=164c5b15cc6715d1",
        "pkg:golang/golang.org/x/text@v0.31.0?package-id=6dc691b2a3ce225d",
        "pkg:golang/golang.org/x/time@v0.14.0?package-id=1d7244f533088bad",
        "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9?package-id=42c759b6fd078217",
        "pkg:golang/google.golang.org/api@v0.254.0?package-id=39fd7a8a2727fab9",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5?package-id=8d1c36d225d0ad43",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8?package-id=04c09cfb42f5af85",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822?package-id=d18410316de6c7ae",
        "pkg:golang/google.golang.org/grpc@v1.76.0?package-id=4ed23868b1bd197b",
        "pkg:golang/google.golang.org/protobuf@v1.36.10?package-id=9b76a2f558aa037f",
        "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28?package-id=bdbf7ce49c39ded4",
        "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0?package-id=e4659842cf45248e",
        "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=fee7225124845b33",
        "pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=a8bebb795e3e5edd",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=3ad0d3b88aea9a52",
        "pkg:golang/helm.sh/helm/v3@v3.19.2?package-id=ee7104bb159325dd",
        "pkg:golang/k8s.io/api@v0.34.2?package-id=6871f02d417490af",
        "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0?package-id=18e02c08c1e4126e",
        "pkg:golang/k8s.io/apimachinery@v0.34.2?package-id=822e2ab779b309bd",
        "pkg:golang/k8s.io/apiserver@v0.34.0?package-id=f094c9d2a5054c8d",
        "pkg:golang/k8s.io/cli-runtime@v0.34.0?package-id=aca5b1923d0e9f36",
        "pkg:golang/k8s.io/client-go@v0.34.1?package-id=825eb8d94fe11c06",
        "pkg:golang/k8s.io/component-base@v0.34.0?package-id=b778222566c77173",
        "pkg:golang/k8s.io/klog/v2@v2.130.1?package-id=e888845c0674ba7c",
        "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b?package-id=47c64a95ccbcdcd0",
        "pkg:golang/k8s.io/kubectl@v0.34.0?package-id=2b0573c9848384b2",
        "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397?package-id=d037e616e0ae27d9",
        "pkg:golang/modernc.org/libc@v1.67.6?package-id=7c7960dab308004e",
        "pkg:golang/modernc.org/mathutil@v1.7.1?package-id=06ad73305c520783",
        "pkg:golang/modernc.org/memory@v1.11.0?package-id=f64c011a5ab235ab",
        "pkg:golang/modernc.org/sqlite@v1.44.3?package-id=db2264d1150ef34f",
        "pkg:golang/mvdan.cc/sh/v3@v3.11.0?package-id=fd1e542e5847691a",
        "pkg:golang/oras.land/oras-go/v2@v2.6.0?package-id=62649d4e4faafe8f",
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8?package-id=31b1e232d5e2bfba",
        "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1?package-id=1c42d72a502d72ac",
        "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1?package-id=e7cb995f097cb060",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=266d60dd4456b9d9",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0?package-id=9434efc8fda2f5c0",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=efaa08ca19821443",
        "pkg:golang/stdlib@1.25.11?package-id=e188ee91c393a7d2"
      ]
    },
    {
      "ref": "pkg:golang/trivy-cdxgen@v0.0.0-20260613212014-4edd3409b343?package-id=e8efcbd5e348ae29",
      "dependsOn": [
        "pkg:golang/cel.dev/expr@v0.24.0?package-id=0119ca59fb7df87c",
        "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=0252202b2ae0c589",
        "pkg:golang/cloud.google.com/go/auth@v0.17.0?package-id=9f6cd60f2c56688f",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=e71dcdd441b87bb9",
        "pkg:golang/cloud.google.com/go/iam@v1.5.3?package-id=e1d3a2789c879bf1",
        "pkg:golang/cloud.google.com/go/monitoring@v1.24.2?package-id=e8f310597c0973d4",
        "pkg:golang/cloud.google.com/go/storage@v1.56.0?package-id=cca19764cf250e51",
        "pkg:golang/cloud.google.com/go@v0.121.6?package-id=971c4f07869d0edd",
        "pkg:golang/dario.cat/mergo@v1.0.2?package-id=30b82cd5462de301",
        "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=ce5e0f6636a20604",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=91c1d7221fdeb338",
        "pkg:golang/github.com/alecthomas/chroma@v0.10.0?package-id=f28e419bd02b3304",
        "pkg:golang/github.com/anchore/go-struct-converter@v0.0.0-20221118182256-c68fdcfa2092?package-id=59088aa66d542772",
        "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0?package-id=99cceecb454cdd67",
        "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0?package-id=71a84370619d0d3e",
        "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce?package-id=0c7fdbf8a863965b",
        "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.2?package-id=7a1f74c1b44026d8",
        "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1?package-id=62fe86eaa402e8d1",
        "pkg:golang/github.com/aquasecurity/go-version@v0.0.1?package-id=6157434e956f5974",
        "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10?package-id=67322fd67a117672",
        "pkg:golang/github.com/aquasecurity/jfather@v0.0.8?package-id=3ecd14fc09be4361",
        "pkg:golang/github.com/aquasecurity/table@v1.11.0?package-id=dfa0c3deb7c4d2da",
        "pkg:golang/github.com/aquasecurity/tml@v0.6.1?package-id=f57f29746e8867da",
        "pkg:golang/github.com/aquasecurity/trivy-checks@v1.11.3-0.20250604022615-9a7efa7c9169?package-id=ddc9d601387b1455",
        "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20250929072116-eba1ced2340a?package-id=e3d7ef75b2fe60c9",
        "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48?package-id=0fd48b4cdf4e4bf9",
        "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1?package-id=548d2969c332ca80",
        "pkg:golang/github.com/aquasecurity/trivy@v0.68.2?package-id=4e345b127e1e1338",
        "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=c7b48cf38229a756",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3?package-id=9716ca44d8e61969",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.0?package-id=34918793ffd4eaef",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.0?package-id=d61d4a4e454e4338",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.14?package-id=e9da7c89083101ee",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.14?package-id=13ab7c7280765c57",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.14?package-id=26ef868547c243ed",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.4?package-id=0887efbd2bacfc48",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.14?package-id=a4c6a6c08ffeba1d",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1?package-id=6d9ea12959ce78f7",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.273.0?package-id=beacef30ada54e66",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.53.1?package-id=bfd2d44d39d72649",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.3?package-id=e64aa020c5c712a9",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.5?package-id=cff7cfb26727dd75",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.14?package-id=cfabd912ddeffb8e",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.14?package-id=c6612099bffdf4a5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0?package-id=9ca568f6c59705b2",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.1?package-id=5dc41fbf7cff38b3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.4?package-id=dfd3a4c36ba4ea1a",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.8?package-id=15abf3049527a473",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.1?package-id=9c54b92340db5d7e",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.40.0?package-id=1e25ae11d8799f5b",
        "pkg:golang/github.com/aws/smithy-go@v1.23.2?package-id=b6fb03437ed7ff18",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.20.0?package-id=22b1f2d62a6a0475",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1?package-id=85d371e63c52f647",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3?package-id=10130dbbe281a278",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.11.2?package-id=28a131223b3fbf98",
        "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.6.0?package-id=5bcc8a2a9485355d",
        "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=16fdc9471f6401a4",
        "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d?package-id=a5b1757512098910",
        "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c?package-id=53e3dd7a189cc2b4",
        "pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=5a1a2cd45d010469",
        "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=b623559a981406b9",
        "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1?package-id=c41da2747d6b8fe4",
        "pkg:golang/github.com/briandowns/spinner@v1.23.0?package-id=24dafff7466bc941",
        "pkg:golang/github.com/burntsushi/toml@v1.5.0?package-id=8f3b6e2d2a2ebc05",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=7064151c8c6bbc41",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=c236809d984a7a0e",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=518fac55782a4cb6",
        "pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=493e6d2c33f9c526",
        "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=d9b6bfa115d1ae0a",
        "pkg:golang/github.com/cloudflare/circl@v1.6.1?package-id=fbdda792b7df3683",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250501225837-2ac532fd4443?package-id=215f98c31e7f62b4",
        "pkg:golang/github.com/containerd/containerd/api@v1.10.0?package-id=569888ecd1a1b8b0",
        "pkg:golang/github.com/containerd/containerd/v2@v2.2.0?package-id=f023f50a0679ea88",
        "pkg:golang/github.com/containerd/containerd@v1.7.29?package-id=ea1e14337084f132",
        "pkg:golang/github.com/containerd/continuity@v0.4.5?package-id=f04c5ec4b9f644b9",
        "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=29e8a66555b08850",
        "pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=7619c65218faa245",
        "pkg:golang/github.com/containerd/fifo@v1.1.0?package-id=2133a25cb7ff878f",
        "pkg:golang/github.com/containerd/log@v0.1.0?package-id=4ca5314488a77f9b",
        "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2?package-id=c6246faa0c6fab70",
        "pkg:golang/github.com/containerd/plugin@v1.0.0?package-id=1338ccf379de2f5d",
        "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.17.0?package-id=e5cb92459d6e3242",
        "pkg:golang/github.com/containerd/ttrpc@v1.2.7?package-id=3ffbaebf636ac874",
        "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3?package-id=d0058883bbbb5125",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20231011164504-785e29786b46?package-id=d3ffa52073e26532",
        "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.9.3?package-id=0f78bdb2208033ef",
        "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.0?package-id=4338705f6fc303c1",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e9f2523631a5d82c",
        "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f?package-id=33f921ae10c2af17",
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=33b3e556f2babaec",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=c9c18741265892a9",
        "pkg:golang/github.com/distribution/reference@v0.6.0?package-id=3f1a44ba649755ad",
        "pkg:golang/github.com/dlclark/regexp2@v1.11.0?package-id=3440fd25722cc4e5",
        "pkg:golang/github.com/docker/cli@v29.0.3%2Bincompatible?package-id=62cadfa850a2c5ac",
        "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible?package-id=0ed035fc4af3b682",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3?package-id=8270040cd9ea682f",
        "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible?package-id=2ab90883ad7bd26a",
        "pkg:golang/github.com/docker/go-connections@v0.6.0?package-id=3d09446bb503b3dc",
        "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=2375b09c146b6bff",
        "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707?package-id=a530ef68c89a1bd2",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=d4350eca2bae2d97",
        "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=594c98fac62bb296",
        "pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=11231529369f4c0d",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.4?package-id=703032f55804cc56",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1?package-id=67da4c24ba72655a",
        "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible?package-id=447ffa7f90c6b22d",
        "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f?package-id=27040cb1187546db",
        "pkg:golang/github.com/fatih/color@v1.18.0?package-id=1b698410afe10990",
        "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=76675e81aaee4979",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=c53a140cf01d4ecf",
        "pkg:golang/github.com/fvbommel/sortorder@v1.1.0?package-id=32089497b3fbee91",
        "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=8654d54efdfd4764",
        "pkg:golang/github.com/go-chi/chi/v5@v5.2.3?package-id=1e4575b8a2941019",
        "pkg:golang/github.com/go-errors/errors@v1.4.2?package-id=82409e68dd182b44",
        "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=b4eb05c32933771b",
        "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2?package-id=dc9f37f97c83f0cb",
        "pkg:golang/github.com/go-git/go-git/v5@v5.16.3?package-id=ee560cf1889068ba",
        "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0?package-id=3f2e0ff3a1448013",
        "pkg:golang/github.com/go-ini/ini@v1.67.0?package-id=2fdab9fd1d1be625",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.2?package-id=d4a05bd8680e8975",
        "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=a9013ea499641d37",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=9d40fad1cb7786b2",
        "pkg:golang/github.com/go-openapi/analysis@v0.24.1?package-id=24a68c7227161fb0",
        "pkg:golang/github.com/go-openapi/errors@v0.22.4?package-id=bc7f7a4262e29bc4",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.1?package-id=7799d37c63e7bdd0",
        "pkg:golang/github.com/go-openapi/jsonreference@v0.21.3?package-id=9a688720baf5269a",
        "pkg:golang/github.com/go-openapi/loads@v0.23.2?package-id=43bec9f0acda6c25",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.2?package-id=4df59e63809b7afd",
        "pkg:golang/github.com/go-openapi/spec@v0.22.1?package-id=29266b252d998b54",
        "pkg:golang/github.com/go-openapi/strfmt@v0.25.0?package-id=c382f563e0139162",
        "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.1?package-id=61bc8fb7f2ca8146",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.1?package-id=ced5e4ff1536795a",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.1?package-id=fe43412b59e75b4b",
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.1?package-id=c169d1f80c67374d",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.1?package-id=0d9fef3badac278b",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.1?package-id=daab274cfa4ec779",
        "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.1?package-id=be3abe9303489c3d",
        "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.1?package-id=3eb59eb19ada5f3c",
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.1?package-id=c61dee1b91236b7c",
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.1?package-id=eac690378d6dd2ed",
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.1?package-id=7477815fc6572712",
        "pkg:golang/github.com/go-openapi/swag@v0.25.1?package-id=5a006099fb5014e8",
        "pkg:golang/github.com/go-openapi/validate@v0.25.1?package-id=a337266fb2a94821",
        "pkg:golang/github.com/go-redis/redis/v8@v8.11.5?package-id=ca30f8110c77b5ef",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0?package-id=4e91b9825d5cf7bb",
        "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=27e346616a7c0f7c",
        "pkg:golang/github.com/gocsaf/csaf/v3@v3.4.0?package-id=561e96dbed8737ef",
        "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=0a2153d89d7730ae",
        "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0?package-id=6de8e56a79a774a6",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=101e82cb5cc6e3e6",
        "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=4b26a0180d2618bf",
        "pkg:golang/github.com/google/btree@v1.1.3?package-id=d61299d6e8b5f608",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.1.8?package-id=614845318937c868",
        "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=92cf9d19a228b8ef",
        "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=1e23702824c7053b",
        "pkg:golang/github.com/google/go-containerregistry@v0.20.6?package-id=9a84d3dea8adb6f2",
        "pkg:golang/github.com/google/go-github/v62@v62.0.0?package-id=a042dbfd0b3df3a1",
        "pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=60ddfb0f462de68d",
        "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0?package-id=8edc1a8eab682653",
        "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=f6594add8d655662",
        "pkg:golang/github.com/google/uuid@v1.6.0?package-id=d76a7e2479f2bfa5",
        "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.6?package-id=98c075dcf022d80e",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.15.0?package-id=cedf7e0e63c2c21d",
        "pkg:golang/github.com/googlecloudplatform/docker-credential-gcr/v2@v2.1.30?package-id=4aef3bbef3295f23",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.29.0?package-id=005eaf5f6f785b7f",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.53.0?package-id=86fa86036bc916a6",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0?package-id=807edd5557ce339b",
        "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674?package-id=59105213c17e7b83",
        "pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=e7debf9b006a5d61",
        "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20190611155906-901d90724c79?package-id=3ecc04f4bdf08b03",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.2?package-id=0b0f787517b47b9f",
        "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.65?package-id=157d8bbcd179f996",
        "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=66c019ff6c1edb70",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=d6b3f79fc44573dc",
        "pkg:golang/github.com/hashicorp/go-getter@v1.8.3?package-id=61d17750627cfe6f",
        "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=f2fb4cf37a01b598",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=950e451bd0259de0",
        "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3?package-id=f15754939c1cd609",
        "pkg:golang/github.com/hashicorp/go-version@v1.7.0?package-id=98c29e2f9dc0071e",
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=f746c62ee2554b96",
        "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0?package-id=dfa5a5543aa9055f",
        "pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=8b57aff5a5161c71",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.0?package-id=9539d77144a27ae5",
        "pkg:golang/github.com/intevation/gval@v1.3.0?package-id=fa04dfa9e0600202",
        "pkg:golang/github.com/intevation/jsonpath@v0.2.1?package-id=800b9161b3399044",
        "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=044872dda80b944e",
        "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=01dea6abfcb8800f",
        "pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=faf031a9b262b9e7",
        "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=deed1734bcfb0ecc",
        "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0?package-id=dc707fb25fbe5b60",
        "pkg:golang/github.com/klauspost/compress@v1.18.1?package-id=5739ce2a37275954",
        "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f?package-id=a8ed534e6a7ee5d6",
        "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23?package-id=84d9db4cf87ea629",
        "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20220614171824-631e686d1075?package-id=108dbc6146557c99",
        "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1?package-id=9a4e21dca1b16e4c",
        "pkg:golang/github.com/knqyf263/nested@v0.0.1?package-id=9135e0730943f1d6",
        "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=8b883c5de355133b",
        "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=c77394eb0332d7e6",
        "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=5ca6f91598f6b80f",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=13fadbf35c629fbf",
        "pkg:golang/github.com/lestrrat-go/dsig@v1.0.0?package-id=8654e65c7309afca",
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=5092cedd6b157994",
        "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1?package-id=ecbe2f3d777917ef",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.11?package-id=251709e40bd21800",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=81b54a44459d0f76",
        "pkg:golang/github.com/lestrrat-go/option@v1.0.1?package-id=7054b59339fae1fa",
        "pkg:golang/github.com/letsencrypt/boulder@v0.0.0-20240620165639-de9c06129bec?package-id=e5e9e3bd422c2aea",
        "pkg:golang/github.com/lib/pq@v1.10.9?package-id=fe9af43e95bb810b",
        "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=b4375eb876cd9eb1",
        "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40?package-id=1471731d6a2df4ea",
        "pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=373de69143de1e83",
        "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20240625071113-56c933208fee?package-id=859225e1915798e1",
        "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20240917043618-e6d2bea5c32e?package-id=bbca5bef6da63f33",
        "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20240620024024-ca14e6327bbd?package-id=dd7792209f69bc99",
        "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a?package-id=b6079cd7710e3a9d",
        "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20221225061455-612096e4bbbd?package-id=8c7208e570fbdb1c",
        "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20231205045356-1b22259a6c44?package-id=dd49045b0f3657fb",
        "pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=a5e975481a670914",
        "pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=0f2f7d97b7a82780",
        "pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=460e4e10ae9f1bb9",
        "pkg:golang/github.com/masterminds/squirrel@v1.5.4?package-id=e6bbd680042160e9",
        "pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=d4115bc31f009139",
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=c0358e588dd85867",
        "pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=a8c0ae4909a8f542",
        "pkg:golang/github.com/mattn/go-shellwords@v1.0.12?package-id=25af82268556a2e1",
        "pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=6b7a5e1d904deb35",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=6bb0810887799a82",
        "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=41c731bde5a887e6",
        "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2?package-id=109418670cddac09",
        "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=846f1637b8e25541",
        "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=df456163dc003f6e",
        "pkg:golang/github.com/moby/buildkit@v0.26.2?package-id=b3f0dee168c74382",
        "pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=3bb1f6ddaa519cc8",
        "pkg:golang/github.com/moby/locker@v1.0.1?package-id=0b2e7a470836e93f",
        "pkg:golang/github.com/moby/moby/api@v1.52.0?package-id=76d7bca4e303c21a",
        "pkg:golang/github.com/moby/moby/client@v0.1.0?package-id=75d15a59b14de9af",
        "pkg:golang/github.com/moby/spdystream@v0.5.0?package-id=7e04f2de8b3d4807",
        "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0?package-id=a4ba8c451886ba42",
        "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2?package-id=c7268d3c86d3f904",
        "pkg:golang/github.com/moby/sys/sequential@v0.6.0?package-id=8b3ec495511a4df9",
        "pkg:golang/github.com/moby/sys/signal@v0.7.1?package-id=5f24af718db8c601",
        "pkg:golang/github.com/moby/sys/user@v0.4.0?package-id=1698e4616dad3612",
        "pkg:golang/github.com/moby/sys/userns@v0.1.0?package-id=9b3b13b38193bb5f",
        "pkg:golang/github.com/moby/term@v0.5.2?package-id=03a78bd9133352c9",
        "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=8ed43c2874f3198d",
        "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=f46524d209fc6451",
        "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=d3415508da93f5e2",
        "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=e537e6a45c2f89a3",
        "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=5acf34f4ce83ac3e",
        "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f?package-id=891d2fda3bd85652",
        "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=3e139b404feda467",
        "pkg:golang/github.com/nytimes/gziphandler@v1.1.1?package-id=9215d722cae63d1a",
        "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=6f2c1b8f811d9a51",
        "pkg:golang/github.com/oklog/ulid@v1.3.1?package-id=fbc5b807c346f490",
        "pkg:golang/github.com/open-policy-agent/opa@v1.10.1?package-id=255f2f61357ab9d1",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=a6007585264006e8",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=303c556ef6500e9d",
        "pkg:golang/github.com/opencontainers/runtime-spec@v1.2.1?package-id=f5b7d398d910d163",
        "pkg:golang/github.com/opencontainers/selinux@v1.13.0?package-id=708705a334565814",
        "pkg:golang/github.com/openvex/discovery@v0.1.1-0.20240802171711-7c54efc57553?package-id=48295c2999bd0fe9",
        "pkg:golang/github.com/openvex/go-vex@v0.2.7?package-id=48382e36124c8c6b",
        "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3?package-id=2219995d09d4a181",
        "pkg:golang/github.com/owenrumney/squealer@v1.2.11?package-id=7d08f62d5da0e430",
        "pkg:golang/github.com/package-url/packageurl-go@v0.1.3?package-id=dd0740a808c0bc2f",
        "pkg:golang/github.com/pandatix/go-cvss@v0.6.2?package-id=832d12447960972a",
        "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=96b26b551e9a7352",
        "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible?package-id=fe5f3797aab904e7",
        "pkg:golang/github.com/pjbgf/sha1cd@v0.3.2?package-id=c38ed4019bef48b5",
        "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=0cad9575be669130",
        "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=0397c96eedbe016f",
        "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=7ba766e3e1b3fadb",
        "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=12626f2405d47964",
        "pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=0b94ce449fbbdbea",
        "pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=7d2fccd77ae9c52e",
        "pkg:golang/github.com/prometheus/common@v0.66.1?package-id=10a8db9746ce895d",
        "pkg:golang/github.com/prometheus/procfs@v0.17.0?package-id=9c78ff2ea57a46f1",
        "pkg:golang/github.com/protonmail/go-crypto@v1.3.0?package-id=966c3f3ed582c467",
        "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=955029b9b46c7df2",
        "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=701c1e1d7ebf5508",
        "pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=3c884b4a38aa0b24",
        "pkg:golang/github.com/rubenv/sql-migrate@v1.8.0?package-id=a29976a6910fc5c8",
        "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=0a55fef375794ab1",
        "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=2c298a02d4085cb8",
        "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=f2b0b14ce0396b69",
        "pkg:golang/github.com/samber/lo@v1.52.0?package-id=112d0c0a08f1a352",
        "pkg:golang/github.com/samber/oops@v1.18.1?package-id=c2f1c21dbe999f11",
        "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=ddb8aedca5aebdd8",
        "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0?package-id=f3ec74210406d50b",
        "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=d2fc630ec49ea5b0",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.9.1?package-id=16a7cd41393dbab7",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=8235eae49b03bb1e",
        "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=5f18dea9c052e367",
        "pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=69490be2e74834f5",
        "pkg:golang/github.com/sigstore/cosign/v2@v2.2.4?package-id=9cf3c14d196e454e",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.0?package-id=d29ea4d9508e35d4",
        "pkg:golang/github.com/sigstore/rekor@v1.4.3?package-id=05970364d5d70ade",
        "pkg:golang/github.com/sigstore/sigstore@v1.9.5?package-id=77a17ee9bd28b5c9",
        "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.2?package-id=b4f3953abe942fde",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4-0.20230606125235-dd1b4c2e81af?package-id=e88d3af9613246fb",
        "pkg:golang/github.com/skeema/knownhosts@v1.3.1?package-id=65b15212473f4303",
        "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=adb794ada86afe45",
        "pkg:golang/github.com/spdx/tools-golang@v0.5.5?package-id=b48e53a893656184",
        "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=940e1963ed606b13",
        "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=54f84d8fb23d0fc2",
        "pkg:golang/github.com/spf13/cobra@v1.10.1?package-id=9f73fab7372e1f3c",
        "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=21f63e6799441fd1",
        "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=a96122d2eddb28c6",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.5.0?package-id=c960131e031b517d",
        "pkg:golang/github.com/stretchr/objx@v0.5.2?package-id=82c876d3d02aae48",
        "pkg:golang/github.com/stretchr/testify@v1.11.1?package-id=7b80fe08af2f25a0",
        "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=a30a1a265837e7ff",
        "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=b9e0ad7843d55e03",
        "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=eada086ea14074fd",
        "pkg:golang/github.com/tetratelabs/wazero@v1.10.1?package-id=0ce3ac9cf990a82f",
        "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=253e737ac9286ba9",
        "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=4ba5c444c387b93d",
        "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=6372e9e031de4dba",
        "pkg:golang/github.com/toqueteos/webbrowser@v1.2.0?package-id=599fb6c9e3ffdffc",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=dfc92409aedc77be",
        "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible?package-id=bb31c6447a5dec71",
        "pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=31864cecca14dce2",
        "pkg:golang/github.com/valyala/fastjson@v1.6.4?package-id=9ecdd191dd955d1c",
        "pkg:golang/github.com/vbatts/tar-split@v0.12.2?package-id=c34f8675f5773719",
        "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.30?package-id=0778fca9a5c31579",
        "pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=bcfd29e91fe7dd2f",
        "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1?package-id=11c9abe440d1cdcb",
        "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0?package-id=9785247496b8d51b",
        "pkg:golang/github.com/x448/float16@v0.8.4?package-id=9a962a2a919e4f8f",
        "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=499698c0b37cbd27",
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=d630560aec33f77d",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=df22ffa2bae0a7e2",
        "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=2ba21a7458fbaa34",
        "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8?package-id=3e98e11239e8e27b",
        "pkg:golang/github.com/xlab/treeprint@v1.2.0?package-id=2f08fc63741ce400",
        "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=a08cb62a547599fb",
        "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0?package-id=b0036e65a18b624d",
        "pkg:golang/github.com/zclconf/go-cty@v1.17.0?package-id=7ebc424a6c7eecac",
        "pkg:golang/github.com/zeebo/errs@v1.4.0?package-id=e43f35d405cfd8af",
        "pkg:golang/go.etcd.io/bbolt@v1.4.3?package-id=62a54c1b03b48a45",
        "pkg:golang/go.mongodb.org/mongo-driver@v1.17.6?package-id=e6a2059977c53ed3",
        "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=94746a0443a17830",
        "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.36.0?package-id=8a86a6635f67ae89",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.61.0?package-id=0b764b4531745a0d",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0?package-id=39c3361f796a364a",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.38.0?package-id=9492efa993a23060",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0?package-id=647b89a525bcf842",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0?package-id=fab7fbb232566e71",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.38.0?package-id=06eedaeb72da0975",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.38.0?package-id=7e970706cbc510f7",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.38.0?package-id=bdc4faf26afaaddc",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.38.0?package-id=bbc81df4fe56de03",
        "pkg:golang/go.opentelemetry.io/otel@v1.38.0?package-id=cbc5e3040dd1a3fa",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.7.1?package-id=bc302506b5508607",
        "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=90719e6e2eadfa3e",
        "pkg:golang/go.uber.org/zap@v1.27.0?package-id=9009ad5e0088a77e",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.2?package-id=ea737e1950f57aa4",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=bf3d92bf42c13423",
        "pkg:golang/golang.org/x/crypto@v0.45.0?package-id=44f8efaea5efca19",
        "pkg:golang/golang.org/x/exp@v0.0.0-20251023183803-a4bb9ffd2546?package-id=7915ef14d8ed0d6e",
        "pkg:golang/golang.org/x/mod@v0.30.0?package-id=b78b989a1c4c0337",
        "pkg:golang/golang.org/x/net@v0.47.0?package-id=f018490ae2238b0f",
        "pkg:golang/golang.org/x/oauth2@v0.32.0?package-id=14cac98322c28781",
        "pkg:golang/golang.org/x/sync@v0.18.0?package-id=0e2fd0b1b95e5e54",
        "pkg:golang/golang.org/x/sys@v0.38.0?package-id=9fc013721b67f789",
        "pkg:golang/golang.org/x/term@v0.37.0?package-id=50f9066af7db4f62",
        "pkg:golang/golang.org/x/text@v0.31.0?package-id=1bbe2fa0d659d8bb",
        "pkg:golang/golang.org/x/time@v0.14.0?package-id=ec80cd9e47e59771",
        "pkg:golang/golang.org/x/xerrors@v0.0.0-20240716161551-93cc26a95ae9?package-id=4253d98d379d31e5",
        "pkg:golang/google.golang.org/api@v0.254.0?package-id=c6d6e742df58db2c",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250825161204-c5933d9347a5?package-id=e21615e10a920b58",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20251022142026-3a174f9686a8?package-id=2eb1583c08331883",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20250603155806-513f23925822?package-id=f5044d19e17a42a0",
        "pkg:golang/google.golang.org/grpc@v1.76.0?package-id=de06752693d979e1",
        "pkg:golang/google.golang.org/protobuf@v1.36.10?package-id=d0479cc450e9a9ce",
        "pkg:golang/gopkg.in/cheggaaa/pb.v1@v1.0.28?package-id=3fe99c355b2b9dac",
        "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.12.0?package-id=52448f4bd515917e",
        "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=f2c246b83400c84c",
        "pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=a76d96a514756130",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=fe1ecc31d1c5a5c8",
        "pkg:golang/helm.sh/helm/v3@v3.19.2?package-id=c131a40d7107234d",
        "pkg:golang/k8s.io/api@v0.34.2?package-id=27b54ce557fe075e",
        "pkg:golang/k8s.io/apiextensions-apiserver@v0.34.0?package-id=ce67bda5f2e421dc",
        "pkg:golang/k8s.io/apimachinery@v0.34.2?package-id=4971c83392ab7476",
        "pkg:golang/k8s.io/apiserver@v0.34.0?package-id=a1f7569a37de70f0",
        "pkg:golang/k8s.io/cli-runtime@v0.34.0?package-id=5791867cd011a060",
        "pkg:golang/k8s.io/client-go@v0.34.1?package-id=430b0cb29a078cf3",
        "pkg:golang/k8s.io/component-base@v0.34.0?package-id=f170fa652eaa1603",
        "pkg:golang/k8s.io/klog/v2@v2.130.1?package-id=1d540f9558e09715",
        "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250710124328-f3f2b991d03b?package-id=1407672862fbfdb0",
        "pkg:golang/k8s.io/kubectl@v0.34.0?package-id=feedef23b8355145",
        "pkg:golang/k8s.io/utils@v0.0.0-20250604170112-4c0f3b243397?package-id=c91ca55f5b02135b",
        "pkg:golang/modernc.org/libc@v1.67.6?package-id=817dbcc1c742a44c",
        "pkg:golang/modernc.org/mathutil@v1.7.1?package-id=3d282235d980bc24",
        "pkg:golang/modernc.org/memory@v1.11.0?package-id=f51e0610cb0c223a",
        "pkg:golang/modernc.org/sqlite@v1.44.3?package-id=8c6dcc3118a3c971",
        "pkg:golang/mvdan.cc/sh/v3@v3.11.0?package-id=f30ee42409d4a987",
        "pkg:golang/oras.land/oras-go/v2@v2.6.0?package-id=b4cbb593d87c3679",
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20241014173422-cfa47c3a1cc8?package-id=73e521acc41b5f4e",
        "pkg:golang/sigs.k8s.io/kustomize/api@v0.20.1?package-id=1cdb064f5800e2cd",
        "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.20.1?package-id=f40ebe64ce1797f2",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=a3e5f4d4bda8a89e",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0?package-id=546997b9494e7b22",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=65a6efab0828885a",
        "pkg:golang/stdlib@1.25.11?package-id=e5c332129980fb97"
      ]
    },
    {
      "ref": "pkg:maven/lombok/lombok@1.18.46?package-id=c0a30a5f3780897e",
      "dependsOn": [
        "pkg:maven/mavenEcjBootstrapAgent/mavenEcjBootstrapAgent?package-id=f3744fc6176ab878"
      ]
    },
    {
      "ref": "pkg:nuget/FSharp.Compiler.Service@43.12.204?package-id=1fe39ad74bad3fcd",
      "dependsOn": [
        "pkg:nuget/FSharp.Core@10.1.204?package-id=a4de908a42f1c6df"
      ]
    },
    {
      "ref": "pkg:nuget/FSharp.Compiler.Service@43.12.204?package-id=b085873fc9a2c5e1",
      "dependsOn": [
        "pkg:nuget/FSharp.Core@10.1.204?package-id=67dbfd73978866b3"
      ]
    },
    {
      "ref": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0?package-id=b987e2b26bf0d48b",
      "dependsOn": [
        "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=9da777fe6e3b9875"
      ]
    },
    {
      "ref": "pkg:nuget/Microsoft.CodeAnalysis.CSharp@5.3.0?package-id=c9279b7c8f0a43cf",
      "dependsOn": [
        "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=cb0c97b65e583ff8"
      ]
    },
    {
      "ref": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0?package-id=16769f309f725a64",
      "dependsOn": [
        "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=cb0c97b65e583ff8"
      ]
    },
    {
      "ref": "pkg:nuget/Microsoft.CodeAnalysis.VisualBasic@5.3.0?package-id=ad7b1cd01e73df7a",
      "dependsOn": [
        "pkg:nuget/Microsoft.CodeAnalysis.Common@5.3.0?package-id=9da777fe6e3b9875"
      ]
    }
  ]
}
